managing-git-workflows

Fail

Audited by Socket on Feb 15, 2026

2 alerts found:

Obfuscated Filex2
Obfuscated FileHIGH
scripts/check-branch-name.sh

The code is a focused, well-scoped Bash utility for enforcing branch naming conventions. It performs comprehensive validation of format, type, and description, handles protected branches gracefully, and provides actionable guidance without performing external actions. It appears safe for integration into development workflows, with the primary risk being human factors from strict naming rules. The tooling aids consistency and traceability in the repository.

Confidence: 98%
Obfuscated FileHIGH
scripts/validate-commit-msg.sh

The code functions as a conventional-commit validator with clear, user-facing guidance and safe operational boundaries (no external I/O, no secrets handling). It should be considered low-risk for supply-chain abuse in its current form but could benefit from hardened regex handling, extended edge-case testing, and accessibility considerations for color output. Overall, a solid, non-malicious pre-commit check with minimal security risk.

Confidence: 98%
Audit Metadata
Analyzed At
Feb 15, 2026, 10:12 PM
Package URL
pkg:socket/skills-sh/ancoleman%2Fai-design-components%2Fmanaging-git-workflows%2F@1c34d796132fcf06d2061db1cae077c3d5618fb8