session-wrap-up

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
evals/files/setup-eval-2.sh

The fragment is a conventional project bootstrap with an embedded deployment script. While no malicious code is evident, the deploy.sh introduces a significant operational risk by automating pushes to a git origin and remote production deployment. This pattern warrants strict access control, auditing, and safer deployment gating before reuse in public or shared contexts.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:57 PM
Package URL
pkg:socket/skills-sh/xpepper%2Fsession-wrap-up-agent-skill%2Fsession-wrap-up%2F@1b2bfea160de0a974080cfa28e68470a8890bc77