Polars Blazing-Fast DataFrame Query Engine
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is benign and Polars itself is legitimate, but this skill does not actually install or configure official Polars packages; it mainly instructs the agent to install a third-party skill from an unverified repository. That transitive trust chain, combined with mismatched OpenClaw install guidance and lack of pinned/signed payload verification, makes the skill medium-high risk despite no clear evidence of malware or credential theft.
Confidence: 87%Severity: 74%
Audit Metadata