Git Workflows
Audited by Socket on Mar 10, 2026
3 alerts found:
Obfuscated Filex3The Git Switch skill is benign and proportionate to its stated purpose. It safely manages uncommitted changes, validates the existence of branches on local and remote, and uses Git commands to switch branches within defined scope constraints. There are no credential access, data exfiltration, or supply-chain risks evident. Input sanitization reduces command-injection risk, and user prompts prevent destructive automatic actions. Overall, a well-scoped developer tool for local repository workflow.
The skill aligns with its stated purpose: a focused, local Git operation abort helper that detects in-progress state and applies the correct abort command, without remote interactions or credential handling. The footprint is proportionate and minimal, with no suspicious external dependencies or data flows. Overall assessment: Benign with moderate security risk due to local command execution, but well-scoped and low risk in practice.
The Git Sync skill presents a coherent, purpose-aligned feature: it performs a read-only fetch of remote refs and reports status without altering local state. The explicit safeguards (read-only scope, input sanitization notes) support its benign usage. Data flows are internal, with outputs directed to the user, and no credentials or external data exfiltration are involved. The only notable risk is misexecution in automated contexts where the shell-based commands might be run unintentionally; otherwise the footprint is proportionate and appropriate for its purpose.