skills/joydai2026-del/skills/wrapup/Socket

wrapup

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose matches session wrap-up automation, but the footprint is broad and high-impact. The main risk is mandatory autonomous file mutation plus git/GitHub sync across multiple repos/worktrees, with key logic hidden in local unreviewed scripts/playbooks; this is high security risk but not confirmed malware.

Confidence: 86%Severity: 78%

Audit Metadata

Analyzed At

Sep 9, 2026, 05:36 PM

Package URL

pkg:socket/skills-sh/joydai2026-del%2Fskills%2Fwrapup%2F@76eed9ee4236794ad385133372c1d4ee474701ede40aa7f7e56e2f355009fa82