oh-precommit-codecheck
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Purpose and capabilities mostly align: this is a pre-commit lint/auto-fix skill. The main risk is install/execution trust, because a hidden setup path downloads substantial external CodeArts tooling that cannot be verified from the provided skill text; combined with autonomous local file modification, this makes the skill suspicious but not clearly malicious.
Confidence: 82%Severity: 78%
Audit Metadata