commit

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities mostly align with a Git commit workflow, and the flagged command/pre-execution findings appear benign or false positives. However, it depends on unverifiable helper CLIs (`ai-commit`, `ai-coord`) that drive local commits, pushes, and reconciliation, so install trust is insufficiently established; this makes the skill high-risk despite coherent intent.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Oct 8, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/paulrberg%2Fagent-skills%2Fcommit%2F@cb7653c55af34e91f4c9acc8a8d9a1b06ee8eb59bb046411bb7b45a0e4af0bcb