skills/gitwhy-cli/gitwhy/gitwhy-context-saving/Socket

gitwhy-context-saving

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose, but it relies on an unidentified GitWhy CLI/MCP service and sends potentially sensitive engineering context to an unnamed cloud backend. The main issue is unverifiable provenance and opaque data routing, not confirmed malicious behavior.

Confidence: 83%Severity: 76%

Audit Metadata

Analyzed At

Mar 20, 2026, 06:59 PM

Package URL

pkg:socket/skills-sh/gitwhy-cli%2Fgitwhy%2Fgitwhy-context-saving%2F@c6fc4d2c6623efbd0383a839e0d26e7742d5fb0f