the-hit

Warn

Audited by Socket on Apr 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's coding-orchestration purpose broadly matches its behavior, and it does not request credentials or route data to external domains. However, it depends on unverifiable internal gangsta:* skills and enforces automatic cross-skill progression without pause or confirmation, creating transitive trust and autonomy risk disproportionate to a simple workflow guide.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Apr 26, 2026, 06:24 AM
Package URL
pkg:socket/skills-sh/kucherenko%2Fgangsta%2Fthe-hit%2F@00d4a89d6038f50306c6f2cc714956edecb91983