Skip to main content

code-explainer

Facilitates clear communication of complex code concepts for effective team knowledge sharing and onboarding.

Install this skill

or
58/100

Security score

The code-explainer skill was audited on Feb 28, 2026 and we found 6 security issues across 3 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 651

Template literal with variable interpolation in command context

SourceSKILL.md
651const user = await api.get(`/users/${id}`);
high line 658

Template literal with variable interpolation in command context

SourceSKILL.md
658const user = await api.get(`/users/${id}`);
medium line 105

Access to .env file

SourceSKILL.md
105process.env.JWT_SECRET,
medium line 185

Access to .env file

SourceSKILL.md
185process.env.JWT_SECRET,
low line 194

Access to .env file

SourceSKILL.md
194- **Secret** `process.env.JWT_SECRET`: Private key used to sign the token
low line 635

External URL reference

SourceSKILL.md
635const config = { apiUrl: 'https://api.example.com' };
Scanned on Feb 28, 2026
View Security Dashboard