cli-tool

Facilitates the creation of command-line tools with argument parsing and subcommands for enhanced user experience.

Install this skill

37/100

Security score

The cli-tool skill was audited on Feb 9, 2026 and we found 9 security issues across 3 threat categories, including 3 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 563

Direct command execution function call

SourceSKILL.md

563	const output = execSync('node dist/cli.js --help').toString();

high line 568

Direct command execution function call

SourceSKILL.md

568	const output = execSync('node dist/cli.js add test-item').toString();

medium line 148

Template literal with variable interpolation in command context

SourceSKILL.md

148	console.log(`Input: ${input}`);

medium line 149

Template literal with variable interpolation in command context

SourceSKILL.md

149	console.log(`Output: ${options.output}`);

low line 559

Node child_process module reference

SourceSKILL.md

559	import { execSync } from 'child_process';

low line 430

Access to hidden dotfiles in home directory

SourceSKILL.md

430	mytool --completions bash > ~/.local/share/bash-completion/completions/mytool

low line 431

Access to hidden dotfiles in home directory

SourceSKILL.md

431	mytool --completions zsh > ~/.zfunc/_mytool

medium line 477

Access to hidden dotfiles in home directory

SourceSKILL.md

477	\| No config file \| Support `~/.config/tool/config.toml` \|

high line 602

Access to system keychain/keyring

SourceSKILL.md

602	- [ ] Credentials stored in OS keyring (if needed)

Scanned on Feb 9, 2026

View Security Dashboard

Installation guide →

GitHub Stars 106

Rate this skill

Categorydevelopment

UpdatedMay 21, 2026

majiayu000/claude-skill-registry