ghostty-use

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/ghostty_session.py

The fragment appears to implement a local session snapshot and restoration utility, not malware. Its restore workflow can execute arbitrary commands if a snapshot contains a malicious `restore_command` or the profile environment file contains a malicious prefix. Treat these files and the dynamically loaded history-reader as trusted inputs; avoid restoring untrusted snapshots and consider rejecting or safely tokenizing custom commands.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Oct 8, 2026, 03:08 AM
Package URL
pkg:socket/skills-sh/daymade%2Fclaude-code-skills%2Fghostty-use%2F@9abff83cfa36a1c30adf5ed08f435d7859015abfbc80d5c569c606019d04db45