grpcurl Command-Line gRPC Client
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the claimed purpose is coherent with grpcurl usage, and upstream grpcurl appears legitimate, but the actual skill install path relies on unrelated third-party skill repositories and transitive skill installation rather than FullStory's official grpcurl distribution. That mismatch raises meaningful supply-chain and trust risk even without clear evidence of overt malicious behavior.
Confidence: 88%Severity: 68%
Audit Metadata