git-prefs

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/empty-worktree.mjs

This script deliberately removes all contents of the current linked Git worktree, then writes a placeholder and attempts to prune its Git worktree registration. Its root and linked-worktree checks reduce accidental scope, and --dry-run is available, but normal execution causes substantial data loss within that worktree. No credential theft, network exfiltration, or other malware behavior is evident; treat it as a high-impact destructive utility and run only when that deletion is intended.

Confidence: 99%Severity: 55%
Audit Metadata
Analyzed At
Nov 8, 2026, 09:20 AM
Package URL
pkg:socket/skills-sh/gitbobobo%2Fbstack%2Fgit-prefs%2F@6738769ed4d17c2bb0e33957a0e8a8ab68050aac5831cda1bb55e22d167dea8e