pre-commit

Warn

Audited by Socket on Sep 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main validation behavior fits the stated pre-commit purpose, but trust is reduced by undisclosed local helper scripts and a companion review path that may forward repository diffs to unknown external services. No clear credential harvesting or overtly malicious behavior is present from the visible skill alone.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Sep 2, 2026, 11:46 AM
Package URL
pkg:socket/skills-sh/matteocervelli%2Fllms%2Fpre-commit%2F@20453400b12087a5533f7245f3018409cd2491b550cc23ae6ec31971e9ca884b
Security Audit — socket — pre-commit