sanity-check

Warn

Audited by Socket on Oct 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill implements it with load-time pre-execution. Although there is no credential theft or remote payload, running `make lint` and `go test` before approval executes repository-controlled code automatically, creating a high security risk without clear malicious intent.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Oct 15, 2026, 11:53 PM
Package URL
pkg:socket/skills-sh/chmouel%2Flazyworktree%2Fsanity-check%2F@573de233d8e080b297df27f571be28028ab87001913bc5446128612d99b94806