grpcurl Command-Line gRPC Client

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the claimed purpose is coherent with grpcurl usage, and upstream grpcurl appears legitimate, but the actual skill install path relies on unrelated third-party skill repositories and transitive skill installation rather than FullStory's official grpcurl distribution. That mismatch raises meaningful supply-chain and trust risk even without clear evidence of overt malicious behavior.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Mar 29, 2026, 02:40 AM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fgrpcurl-command-line-grpc-client%2F@3dffc618f23ecd820ad7f13d653fe7732f1e11b9