platform-worktree

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core Git worktree actions fit its stated purpose, but it goes beyond simple worktree management by automatically trusting local config, installing dependencies, and copying multiple sensitive credential/key files into each new worktree. The behavior is plausibly for local platform development, yet the secret duplication and automatic trust/execution make the scope broader and riskier than a minimal worktree helper.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Mar 30, 2026, 12:27 PM
Package URL
pkg:socket/skills-sh/kevanstannard-atomi%2Fagent-ops%2Fplatform-worktree%2F@ed63a4f31502ba2117acea58f0fd2e4c6ab95809