Hooks Automation

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose broadly matches hook automation, but it grants a third-party CLI wide authority over command hooks, persistent memory, metrics, and agent orchestration. Install source is moderately trustworthy via npm/same-ecosystem evidence, yet the automatic shell-hook execution and parameter interpolation make the overall footprint higher-risk than a typical formatting or session helper.

Confidence: 81%Severity: 66%
Audit Metadata
Analyzed At
Aug 21, 2026, 05:04 AM
Package URL
pkg:socket/skills-sh/i-onlabs%2Fclaude-code-skills%2Fhooks-automation%2F@b0bd2ca955c8a2975de508daa0fe41ed33d40771
Security Audit — socket — Hooks Automation