using-git-worktrees

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s actual footprint is broader than its stated purpose. It looks like a thin alias for legacy `using-git-worktrees`, but mostly imposes global workflow rules and routes work into other agents/tools, including external MCP-backed services. No direct malware or covert exfiltration is present, but the capability scope and transitive trust are not well aligned with a simple git-worktree compatibility skill.

Confidence: 84%Severity: 57%
Audit Metadata
Analyzed At
Aug 27, 2026, 07:38 AM
Package URL
pkg:socket/skills-sh/galyarderlabs%2Fgalyarder-framework%2Fusing-git-worktrees%2F@2d197adb05e2b18f5d016888e1e4dade7f657be784d948b419f43cd8147aebb4
Security Audit — socket — using-git-worktrees