Git Security Scanner

• Analyzed: May 15, 2026, 7:49 AM
• Findings: 1
• Version: 1.0.1
• Hash: 96e891e83cab089efd72945e63ee5800fa00fa411febe50dd17005696d7cb727
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill documentation (SKILL.md) contains a troubleshooting section that explicitly instructs users to ignore security warnings (e.g., VirusTotal) and use a '--force' flag for installation, which is a common social engineering tactic to bypass security controls. While the tool's stated purpose is security scanning, the actual implementation code for the 'git-security-scan' wrapper is missing from the bundle, and the primary dependency 'shipguard' is linked to the author's personal repository (celstnblacc), making the instruction to bypass security checks highly concerning.