simmer-skill-builder
Warn
Audited by Socket on Apr 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose matches its behavior, but the footprint is high risk. It generates and publishes autonomous trading skills, converts untrusted external content into runnable code, and uses an unpinned `npx ...@latest` publish step. This looks more like a risky skill-generation and distribution pipeline than a narrowly scoped helper.
Confidence: 86%Severity: 84%
Audit Metadata