gRPC Service Tool
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated gRPC purpose is plausible, but the install and trust story is inconsistent. The skill presents grpc/grpc-node as the source while installation actually routes through third-party skill installers and an unverified publisher repo, creating a transitive trust risk disproportionate to a simple library reference skill.
Confidence: 84%Severity: 72%
Audit Metadata