vignette-todo-run

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/finish-run.sh

No malicious behavior is evident. The main risk is destructive cleanup: --prune can force-remove worktrees across runs rather than only the specified run, potentially discarding uncommitted work. Use only after inspecting the exact worktrees to be removed.

Confidence: 98%Severity: 54%
Audit Metadata
Analyzed At
Sep 25, 2026, 03:28 PM
Package URL
pkg:socket/skills-sh/petekp%2Fclaude-code-setup%2Fvignette-todo-run%2F@32d062125be28d332871727c9ceba777a8904138ec953d8fe85b229c6aa20b4c