coupling-router

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/worktree-federation.ts

This is a readable Git worktree-management utility with no evident malware, credential theft, or network activity. Its primary security concern is destructive data loss: quarantine can reset tracked changes and delete untracked files without actually preserving staged changes, and sweep can force-remove worktrees when pruning is enabled. Treat quarantine and prune operations as high-impact and verify backups and inputs before use; severity is moderate to high for data integrity, with no malicious intent evident.

Confidence: 98%Severity: 72%
Audit Metadata
Analyzed At
Oct 29, 2026, 05:52 PM
Package URL
pkg:socket/skills-sh/harshsinghmp%2Fmuse-skills%2Fcoupling-router%2F@3582b5dd83df815c025c6d902b3b8c2a10d2acdcdcf2640491e5eba58a7f653a