Skip to main content

create-shortcut

Facilitates the creation and management of local skills as shortcuts in Claude, enhancing user command efficiency.

Install this skill

or
64/100

Security score

The create-shortcut skill was audited on May 16, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 144

Template literal with variable interpolation in command context

SourceSKILL.md
144```bash
medium line 269

Template literal with variable interpolation in command context

SourceSKILL.md
269```bash
medium line 27

Access to hidden dotfiles in home directory

SourceSKILL.md
27Creates a SKILL.md in `.claude/skills/<name>/` (project-local) or `~/.claude/skills/<name>/` (global with `--global`).
low line 51

Access to hidden dotfiles in home directory

SourceSKILL.md
51⚡ Global Skills (~/.claude/skills/)
medium line 75

Access to hidden dotfiles in home directory

SourceSKILL.md
75- Approximate **usage count** — derived by greping the command name across `~/.claude/projects/*/*.jsonl` session files (read-only, no stored counter — counts stay computed, not persisted).
medium line 171

Access to hidden dotfiles in home directory

SourceSKILL.md
171Creates in `~/.claude/skills/` instead of `.claude/skills/`.
medium line 256

Access to hidden dotfiles in home directory

SourceSKILL.md
2561. **Scan** both `.claude/skills/` (local) and `~/.claude/skills/` (global). Read each `SKILL.md` frontmatter and keep only entries with `installer: create-shortcut`.
medium line 259

Access to hidden dotfiles in home directory

SourceSKILL.md
259- **Last invoked** — grep the command name (e.g. `/deploy`) across `~/.claude/projects/*/*.jsonl` and report days since the most recent match (e.g. "used 4d ago", "never used").
Scanned on May 16, 2026
View Security Dashboard
Installation guide →