gatsby-ecommerce-netlify
Audited by Socket on Feb 21, 2026
1 alert found:
Malware[Skill Scanner] Destructive bash command detected (rm -rf, chmod 777) All findings: [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] BENIGN: The code fragment represents standard setup, build, and deployment instructions for a public Netlify/Gatsby template. There is no evidence of malicious behavior, credential harvesting, or unintended data exfiltration within the provided fragment. LLM verification: The provided SKILL.md is documentation for scaffolding and deploying a Gatsby Netlify starter. It does not contain embedded malicious code or obvious backdoors. However, it instructs users to run potentially dangerous shell commands (rm -rf) and to install unpinned third-party packages, creating moderate supply-chain and operational risks (data loss and remote code execution during installs). Treat the file as non-malicious but risky: add usage warnings, avoid running destructive commands withou