skills/rubenflamshepherd/ruben-agent-skills/checkout-commit-push-pr/Socket

checkout-commit-push-pr

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

Coherent git/PR automation skill with official tooling and no suspicious installer or credential-routing behavior. The main risk is autonomy: it can push code, create a PR, and continue modifying/publishing changes until CI passes without explicit user approval, so it is high-risk operationally but not malicious.

Confidence: 92%Severity: 72%

Audit Metadata

Analyzed At

Jul 15, 2026, 04:29 PM

Package URL

pkg:socket/skills-sh/rubenflamshepherd%2Fruben-agent-skills%2Fcheckout-commit-push-pr%2F@c190a89360d53642e393058ad8b7db8d0daa0a33b179460d5c6e67cef085e301