code-review

Warn

Audited by Socket on May 4, 2026

1 alert found:

Anomaly
AnomalyLOW
hooks/install.sh

This fragment is a Git pre-push hook installer/upgrader. It modifies .git/hooks/pre-push to enforce (presumably) code-review/review-check behavior on git push. The installer wrapper itself shows no direct malicious indicators (no network/exfiltration, no credential theft, no obfuscation), but it introduces an execution pivot by installing an executable hook. Security risk depends entirely on what the bundled pre-push hook script does; that content is not provided here. As an installer, it is moderately risky from a supply-chain perspective due to hook-based execution.

Confidence: 66%Severity: 50%
Audit Metadata
Analyzed At
May 4, 2026, 08:39 AM
Package URL
pkg:socket/skills-sh/Wubabalala%2Fclaude-skills%2Fcode-review%2F@e035fc2d9d00b7e7e3fdc557e80e28e81558c046