firehose

Warn

Audited by Socket on Oct 29, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/fast-merger.sh

This readable Bash/Python script automates PR selection and squash-merges qualifying pull requests through GitHub. Its `--admin` option can bypass branch protections, and pending long-running checks do not prevent a merge, so incorrect configuration or selection can merge code without all normal safeguards; this is a high operational security risk, not evidence of malware. No suspicious domains, URLs, IP addresses, or credential theft are present.

Confidence: 98%Severity: 79%
Audit Metadata
Analyzed At
Oct 29, 2026, 02:39 PM
Package URL
pkg:socket/skills-sh/samgalanakis%2Fskills%2Ffirehose%2F@f5dd7c1e7dd0087faa9dfd02b3575a11b4bf2cfa