rollback

Warn

Audited by Socket on Sep 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The rollback behavior itself is coherent and proportionate to the stated Git-focused purpose, and the scanner findings are documentation false positives. The main risk is install/execution trust: `bunx forge rollback` may fetch and run an unpinned, ambiguously sourced `forge` executable, and the skill does not provide enough provenance to verify that binary as the same publisher’s official tool.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Sep 5, 2026, 10:08 AM
Package URL
pkg:socket/skills-sh/harshanandak%2Fforge%2Frollback%2F@4973ea865d9b27b4fd9c539f9871948e5784a791f53293928a9204a03993def8
Security Audit — socket — rollback