git-cp
Warn
Audited by Socket on Mar 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated purpose matches Git operations, but the skill enables autonomous public code publication and relies on a transitive git-manager skill installed through a mutable GitHub trust chain. Data flow is mostly coherent with purpose, so this is not confirmed malicious, but it is medium/high risk for unintended disclosure or unsafe delegated execution.
Confidence: 89%Severity: 71%
Audit Metadata