py-intro
Audited by Socket on Feb 21, 2026
1 alert found:
Malware[Skill Scanner] Destructive bash command detected (rm -rf, chmod 777) All findings: [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] [CRITICAL] command_injection: Destructive bash command detected (rm -rf, chmod 777) (CI004) [AITech 9.1.4] BENIGN: The material is a coherent setup guide for a presentation project with interactive Python execution. It uses standard tooling and deployment steps. The only caveat is the handling of deployment tokens in docs; as long as users supply secrets securely (not embedded in files) and follow best practices, the risk remains low to moderate. No evidence of malware, hidden data collection, or unauthorized behavior is detected in the provided fragment. LLM verification: This skill file is largely a benign project template README describing cloning, installing, building, and deploying a Slidev presentation with a Python runner. The primary risks are operational: documented destructive commands (rm -rf .git) that can remove repository history if run unintentionally, unpinned third-party dependencies/addons (supply-chain risk), and the need to supply a VERCEL_TOKEN to CLI tools (expected for deployment but sensitive). There is no direct evidence in the provided te