git-prefs

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/empty-worktree.mjs

This is a deliberately destructive worktree-cleanup script, not evidence of malware. Running it without --dry-run permanently removes the selected linked worktree's contents; the root and linked-worktree checks reduce accidental scope but do not protect valuable files inside that worktree. Review the target and use --dry-run before execution.

Confidence: 99%Severity: 76%
Audit Metadata
Analyzed At
Oct 13, 2026, 02:11 PM
Package URL
pkg:socket/skills-sh/gitbobobo%2Fskills%2Fgit-prefs%2F@572e13df1966110328b068fb8c3dc50fd28307e163831b2e1733802a2118eaef