Grafana Loki Log Aggregation Agent

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated Loki/Grafana purpose is plausible, but the distribution path is inconsistent with the claimed Grafana source. The main risk is supply-chain and transitive skill installation through an unpinned third-party CLI/repo, not confirmed malicious behavior.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Mar 29, 2026, 02:36 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fgrafana-loki-log-aggregation-agent%2F@0af0a475bd1d7129e6575c2f7838fa794dee388a