skills/bighardperson/computer-science-skills-collection/gitai-automation/Socket

gitai-automation

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated git-automation purpose is plausible, but the skill’s core function depends on an external CLI with unclear provenance, unpinned install guidance, and credential forwarding via `~/.gitai`. Data likely flows from local code and API keys into a black-box tool without documented official endpoints, making the footprint riskier than the skill description suggests.

Confidence: 87%Severity: 82%

Audit Metadata

Analyzed At

Aug 19, 2026, 07:48 PM

Package URL

pkg:socket/skills-sh/bighardperson%2Fcomputer-science-skills-collection%2Fgitai-automation%2F@3e5da61a0a93fde8aa5c17f63163dff7c7425e1173ac244d2588e5ea83b114df