git-vibe-flow
Warn
Audited by Socket on Mar 16, 2026
1 alert found:
AnomalyAnomalyinstall.sh
LOWAnomalyLOW
install.sh
The code functions as an installer for Git Vibe, fetching a binary, wiring global git hooks and an alias, and updating the user PATH. While typical for developer tooling, it introduces meaningful supply-chain and persistence risks due to unverified remote assets and global configurations. Strengthening the process with integrity checks, version pinning, and scoping changes to per-repo configurations will reduce risk and improve safety.
Confidence: 65%Severity: 65%
Audit Metadata