skills/rami-maalouf/ai-agents-config/cmux-and-worktrees/Socket

cmux-and-worktrees

Warn

Audited by Socket on Aug 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s capabilities fit its stated worktree-management purpose, and there is no clear credential harvesting or off-platform data routing. Risk comes from relying on a nonstandard external CLI installed via unpinned same-org `curl|sh` and from executing repo-controlled `.cmux/setup`/npm scripts, which broadens trust to arbitrary local code.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Aug 27, 2026, 01:05 AM

Package URL

pkg:socket/skills-sh/rami-maalouf%2Fai-agents-config%2Fcmux-and-worktrees%2F@71651c41c567d20ff621a3564b02176638487d2b3a14ae1fbaf01d36b654c18f