code-review
Warn
Audited by Socket on May 4, 2026
1 alert found:
AnomalyAnomalyhooks/install.sh
LOWAnomalyLOW
hooks/install.sh
This fragment is a Git pre-push hook installer/upgrader. It modifies .git/hooks/pre-push to enforce (presumably) code-review/review-check behavior on git push. The installer wrapper itself shows no direct malicious indicators (no network/exfiltration, no credential theft, no obfuscation), but it introduces an execution pivot by installing an executable hook. Security risk depends entirely on what the bundled pre-push hook script does; that content is not provided here. As an installer, it is moderately risky from a supply-chain perspective due to hook-based execution.
Confidence: 66%Severity: 50%
Audit Metadata