cancel

Fail

Audited by Socket on Mar 2, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The code fragment is coherently aligned with its stated purpose of canceling and cleaning up various OMC modes and associated state. It includes both graceful, dependency-aware shutdown paths and force/global cleanup options, plus MCP worker teardown. While destructive in scope (deleting state files, killing sessions), these actions are consistent with a “cancel all and reset” capability for an integrated orchestration system. The primary security and risk considerations revolve around accidental data loss and potential misuse if executed with broad permissions or in unintended environments; no external network exfiltration or credential harvesting is evident, and there are no hardcoded secrets. Overall, the footprint is proportional to the stated purpose, but the force/all paths and broad cleanup commands should be guarded with strict access controls and safeguards to prevent accidental damage.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 2, 2026, 12:22 PM
Package URL
pkg:socket/skills-sh/yeachan-heo%2Foh-my-claudecode%2Fcancel%2F@7d3a880ea8c71c8fd26fc3fa6da1005cf4587996