skills/smartworldarafath/google_antigravity_plugins/commit-push-pr/Socket

commit-push-pr

Warn

Audited by Socket on Nov 3, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The local pre-execution commands are benign and no suspicious installer or credential-routing behavior is specified. However, the skill directs autonomous commits, pushes, and PR creation without user confirmation, creating elevated risk of unintended publication.

Confidence: 95%Severity: 72%

Audit Metadata

Analyzed At

Nov 3, 2026, 10:58 AM

Package URL

pkg:socket/skills-sh/smartworldarafath%2Fgoogle_antigravity_plugins%2Fcommit-push-pr%2F@dab32cdede97d21ed8dc1a437fd984c34895abdae5e8a87d4545141d5e4f3e6c