merge-and-branch

Pass

Audited by Socket on Jun 24, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Jun 24, 2026, 08:21 PM

Package URL

pkg:socket/skills-sh/alexanderop%2FworkoutTracker%2Fmerge-and-branch%2F@5791c68505d78ad83579deffdfe60271c66f69c7b9382c4d9220af720c4c8619