Claude Code skills face uneven security screening and low firing rates
A developer's Claude Code skill was flagged DO_NOT_INSTALL by a catalog scanner over a hidden curl | sh command, while separate testing found skills fired in only 15-62% of relevant requests, improved to 62% with a Session-Start hook.
Read the full story at DEV Community — AI ↗
Timeline · 2 reports
- 2026-11-10 15:00 · Towards Data Science
A Session-Start Hook Raised Claude Code Skill Firing From 15% to 62% - 2026-11-10 10:10 · DEV Community — AI
My harmless Claude Code skill got DO_NOT_INSTALL from a security scanner. A hidden curl | sh got CAUTION.