Falco Runtime Security Monitor
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent for a Falco monitoring skill, but the actual artifact is mainly a transitive installer for unseen remote skill content. The monitoring/alerting claims are plausible, yet installation trust is weak and the described automated response powers are significant enough to warrant caution.
Confidence: 79%Severity: 68%
Audit Metadata