From Dev.to
My harmless Claude Code skill got DO_NOT_INSTALL from a security scanner. A hidden curl | sh got CAUTION.
I wrote a small Claude Code skill: a SKILL.md plus a Node script that lints freelance cover letters (AI-sounding phrases, made-up claims). When I submitted it to a public skills catalog, the catalog's...