environments-manager

Warn

Audited by Socket on Aug 7, 2026

1 alert found:

Anomaly
AnomalyLOW
examples/claude/settings.json

This snippet itself is not evidence of malicious code, but it is a high-impact delegation mechanism: it configures automatic execution of two external shell scripts on worktree create/remove. The security posture depends on the trustworthiness and integrity of "$CLAUDE_PROJECT_DIR/scripts/claude-worktree-*.sh" and on whether "$CLAUDE_PROJECT_DIR" is protected from attacker influence. Review and lock down the script contents and the environment variable setting before deploying this hook configuration.

Confidence: 55%Severity: 52%
Audit Metadata
Analyzed At
Aug 7, 2026, 04:33 PM
Package URL
pkg:socket/skills-sh/melvynx%2Faiblueprint%2Fenvironments-manager%2F@760e2fccdb05e3db0a5efed1042be2a2d6d9fd2dce893834b2c6ba75cab45bf6
Security Audit — socket — environments-manager