git-branch-cleaner
Warn
Audited by Socket on Mar 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This skill is consistent with its stated purpose and uses standard git commands to detect and delete merged branches. There are no downloads, external domains, or credential harvesting behaviors. The primary risks are operational (accidental deletion if safeguards are bypassed) and environmental (the agent runtime must restrict Bash execution to the intended git commands). I assess this skill as benign but requiring careful enforcement of execution permissions and user confirmation to avoid accidental destructive actions.
Confidence: 86%Severity: 75%
Audit Metadata