command-creator
Facilitates the creation of command files for the Claude Code framework, enabling user-friendly shortcuts to skills.
Install this skill
or
69/100
Security score
The command-creator skill was audited on May 12, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 92
Template literal with variable interpolation in command context
SourceSKILL.md
| 92 | const skillExists = await fileExists(`.claude/skills/**/${args.skill}/SKILL.md`); |
medium line 94
Template literal with variable interpolation in command context
SourceSKILL.md
| 94 | throw new Error(`Target skill not found: ${args.skill}`); |
medium line 101
Template literal with variable interpolation in command context
SourceSKILL.md
| 101 | const commandPath = `.claude/commands/${commandName}.md`; |
medium line 102
Template literal with variable interpolation in command context
SourceSKILL.md
| 102 | const description = args.description || `Invoke the ${args.skill} skill`; |
medium line 104
Template literal with variable interpolation in command context
SourceSKILL.md
| 104 | const content = `--- |
medium line 122
Template literal with variable interpolation in command context
SourceSKILL.md
| 122 | const newEntry = `| /${commandName} | ${description} | ${args.skill} |`; |
low line 262
External URL reference
SourceSKILL.md
| 262 | - Direct API: `WebFetch({ url: 'https://arxiv.org/search/?query=<topic>&searchtype=all&start=0' })` |
Scanned on May 12, 2026
View Security Dashboard