session-closeout
Warn
Audited by Socket on Jul 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s note/logging purpose is coherent, but auto-running `git add -A`, commit, and mandatory `git push` creates disproportionate scope and autonomous outbound data flow. Main risk is unintended publication of repository contents to whatever remote is already configured, not malware or installer abuse.
Confidence: 89%Severity: 72%
Audit Metadata