skills/agentskillexchange/skills/Grafana Alloy OpenTelemetry Collector Distribution/Socket

Grafana Alloy OpenTelemetry Collector Distribution

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the distribution path is not aligned with Grafana’s official channels and relies on third-party transitive skill installation. This is primarily a supply-chain and trust-boundary issue rather than confirmed malicious behavior.

Confidence: 89%Severity: 74%

Audit Metadata

Analyzed At

Mar 29, 2026, 02:35 AM

Package URL

pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fgrafana-alloy-opentelemetry-collector-distribution%2F@e7c14eb180e799faf7acce87b1530d6b1d346ecc