CreateCLI
Generates production-ready TypeScript CLIs with type safety, error handling, and comprehensive documentation for efficient command-line tool development.
Install this skill
or
60/100
Security score
The CreateCLI skill was audited on May 24, 2026 and we found 10 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 167
Template literal with variable interpolation in command context
SourceSKILL.md
| 167 | - `${PROJECTS_DIR}/PAI/Examples/clis/` - Example CLIs (PUBLIC repo) |
medium line 20
Curl to non-GitHub URL
SourceSKILL.md
| 20 | curl -s -X POST http://localhost:8888/notify \ |
medium line 9
Access to hidden dotfiles in home directory
SourceSKILL.md
| 9 | `~/.pai/PAI/USER/SKILLCUSTOMIZATIONS/CreateCLI/` |
medium line 165
Access to hidden dotfiles in home directory
SourceSKILL.md
| 165 | - `~/.claude/Bin/[cli-name]/` - Personal CLIs (like llcli) |
low line 207
Access to hidden dotfiles in home directory
SourceSKILL.md
| 207 | ~/.claude/Bin/ghcli/ |
low line 233
Access to hidden dotfiles in home directory
SourceSKILL.md
| 233 | ~/.claude/Bin/md2html/ |
low line 256
Access to hidden dotfiles in home directory
SourceSKILL.md
| 256 | ~/.claude/Bin/data-cli/ |
medium line 138
Access to .env file
SourceSKILL.md
| 138 | - .env.example (configuration template) |
low line 211
Access to .env file
SourceSKILL.md
| 211 | ├── .env.example # GITHUB_TOKEN=your_token |
low line 20
External URL reference
SourceSKILL.md
| 20 | curl -s -X POST http://localhost:8888/notify \ |
Scanned on May 24, 2026
View Security Dashboard