skill-composer
Warn
Audited by Socket on Mar 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The code fragment describes a benign orchestration workflow for creating and maintaining skills (SKILL.md) via interactive prompts and coordination with dedicated helper skills. It does not exhibit dangerous behaviors such as credential harvesting, remote exfiltration, or unauthorized actions. The primary risk is standard supply-chain risk associated with composing behaviors from external skills (potentially untrusted). Overall, the footprint is coherent with its stated purpose and proportionate, with moderate supply-chain risk if dependencies are not trusted.
Confidence: 75%Severity: 75%
Audit Metadata