git-vibe-flow

Warn

Audited by Socket on Mar 16, 2026

1 alert found:

Anomaly
AnomalyLOW
install.sh

The code functions as an installer for Git Vibe, fetching a binary, wiring global git hooks and an alias, and updating the user PATH. While typical for developer tooling, it introduces meaningful supply-chain and persistence risks due to unverified remote assets and global configurations. Strengthening the process with integrity checks, version pinning, and scoping changes to per-repo configurations will reduce risk and improve safety.

Confidence: 65%Severity: 65%
Audit Metadata
Analyzed At
Mar 16, 2026, 01:25 PM
Package URL
pkg:socket/skills-sh/sailscastshq%2Fgit-vibe%2Fgit-vibe-flow%2F@be21eb149b129136466a56cadafdf9ffc722b7ae