session-closeout

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s note/logging purpose is coherent, but auto-running `git add -A`, commit, and mandatory `git push` creates disproportionate scope and autonomous outbound data flow. Main risk is unintended publication of repository contents to whatever remote is already configured, not malware or installer abuse.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Jul 24, 2026, 10:31 PM
Package URL
pkg:socket/skills-sh/iamjosuho%2Fmemorb%2Fsession-closeout%2F@518711170f7bfb96f5277f6ed532233c51d9c3d98d0072fe05199d4836a54bb1
Security Audit — socket — session-closeout