merge-prep

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill is coherently aligned with its stated purpose of analysis-only pre-merge preparation. It uses standard git/bash tooling without external downloads, credential exposure, or autonomous actions. Data flows are self-contained (local git data to user-facing reports) and do not route through third-party services. Overall risk is low to moderate and appears benign given its explicit prohibition on auto-merging and pushing. Maintain vigilance for any future changes that introduce network calls, credential handling, or automatic actions, which would raise risk significantly.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 06:41 AM
Package URL
pkg:socket/skills-sh/sd0xdev%2Fsd0x-dev-flow%2Fmerge-prep%2F@88d61abe80cb0a6f8cb9f1345d16c6d9f148d818