operations-worktree

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s stated purpose is coherent with Git/worktree management, and there is no clear credential exfiltration or covert behavior in the text. However, it depends on a mandatory external `gwt` wrapper whose exact identity and official distribution cannot be verified from the skill, while the referenced command set does not match clearly documented public `gwt` tools. Under the required scoring rules, this unverifiable required CLI makes the skill high security risk even without confirmed malicious intent.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Oct 3, 2026, 12:26 AM
Package URL
pkg:socket/skills-sh/vincentkoc%2Fdotskills%2Foperations-worktree%2F@faa30a799794abe18c7470760ae36ffead4db5b407fb16c3357607125fd78f51