skills/open-hax/opencode-skills/giga-workflow/Socket

giga-workflow

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core git/workspace automation behavior is broadly aligned with the stated purpose, but the skill grants strong autonomous commit/propagation capability and sends repository context to an unverifiable, user-supplied Pantheon CLI. This is not confirmed malware, yet the external CLI trust gap and automatic repo-modifying behavior make the skill medium risk.

Confidence: 82%Severity: 61%

Audit Metadata

Analyzed At

Sep 18, 2026, 10:49 AM

Package URL

pkg:socket/skills-sh/open-hax%2Fopencode-skills%2Fgiga-workflow%2F@cffd0529f994c72be7b9efc070b7f89ffa4fd9c86c430e6d46fd78615dce57b6