git-release-finish
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The release workflow is broadly consistent with its stated Git purpose and shows no clear credential theft, exfiltration, or malicious payload. The principal concern is the prerequisite fallback: it installs every skill globally from an unpinned external repository, creating a substantial transitive trust risk. Overall classification: SUSPICIOUS.
Confidence: 92%Severity: 66%
Audit Metadata