recomposing-commits

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill is a procedural guide for safely recomposing commit history using git worktrees. It performs only local git operations and includes deliberate safety measures: refusing protected branches, isolating work in a worktree, and requiring an explicit review gate before making destructive changes to the original branch. There are no indicators of malicious behavior, external downloads, credential harvesting, or data exfiltration. The primary security risks are operational: use of git reset --hard and branch deletion (destructive) and bypassing hooks via --no-verify. Those risks are acknowledged and gated by mandatory user confirmations in the skill. Overall the skill appears benign but operationally powerful—users must follow the review/confirmation steps to avoid accidental data loss.

Confidence: 90%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 05:55 PM
Package URL
pkg:socket/skills-sh/nur-zaman%2Fgit-recompose-skill%2Frecomposing-commits%2F@06b83f537968a3483858374073691a3e15c827b9