skills/open-mercato/skills/om-check-and-commit/Socket

om-check-and-commit

Warn

Audited by Socket on Aug 12, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose matches CI-style verification and publishing, and use of git/jq is proportionate, but the skill executes arbitrary repo-configured commands and may auto-run another unverified skill/tool. The main risk is delegated execution and transitive trust rather than clear malware or credential theft.

Confidence: 81%Severity: 58%

Audit Metadata

Analyzed At

Aug 12, 2026, 06:01 AM

Package URL

pkg:socket/skills-sh/open-mercato%2Fskills%2Fom-check-and-commit%2F@f76fc9ead59569227adecdd522e596d2bb7f760b67587991da5e7d99fdaa6885