pre-land-refuters
Warn
Audited by Socket on Jun 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is largely coherent for AI-assisted pre-merge validation and uses apparently official tooling, but it grants autonomous merge-governing behavior and routes repository context through external LLM CLIs while relying on unseen local scripts. Risk is elevated by unattended real-world actions and prompt-injection exposure rather than by clear malware or credential theft behavior.
Confidence: 84%Severity: 59%
Audit Metadata