environments-manager

Warn

Audited by Socket on Sep 6, 2026

1 alert found:

Anomaly
AnomalyLOW
examples/claude/settings.json

This snippet itself is not evidence of malicious code, but it is a high-impact delegation mechanism: it configures automatic execution of two external shell scripts on worktree create/remove. The security posture depends on the trustworthiness and integrity of "$CLAUDE_PROJECT_DIR/scripts/claude-worktree-*.sh" and on whether "$CLAUDE_PROJECT_DIR" is protected from attacker influence. Review and lock down the script contents and the environment variable setting before deploying this hook configuration.

Confidence: 55%Severity: 52%
Audit Metadata
Analyzed At
Sep 6, 2026, 08:31 PM
Package URL
pkg:socket/skills-sh/melvynx%2Faiblueprint%2Fenvironments-manager%2F@9765d5ea0dc21bce90a7ec46958b5b35ef8b263698d408689e4d3c0b6d290cea