the-hit

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's coding-orchestration purpose broadly matches its behavior, and it does not request credentials or route data to external domains. However, it depends on unverifiable internal gangsta:* skills and enforces automatic cross-skill progression without pause or confirmation, creating transitive trust and autonomy risk disproportionate to a simple workflow guide.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
May 15, 2026, 02:10 PM
Package URL
pkg:socket/skills-sh/kucherenko%2Fgangsta%2Fthe-hit%2F@a98925ea67cb65e940e75ccdb3d8cfc548a6d94e
Security Audit — socket — the-hit