ln-001-push-all
Warn
Audited by Socket on Apr 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's git commit/push behavior fits its stated purpose, but it enables autonomous publication, stages everything by design, and executes lint commands influenced by repository documentation. The only network fetch is same-publisher GitHub raw content, which is a low-to-medium supply-chain concern due to mutable branch fetching rather than evidence of malicious intent.
Confidence: 86%Severity: 68%
Audit Metadata