skills/akillness/oh-my-skills/opik/Socket

opik

Warn

Audited by Socket on Jun 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The Opik functionality itself is coherent and mostly uses official Comet/PyPI/GitHub sources, but the skill is published from a third-party wrapper repo and explicitly installs itself through a transitive skill chain despite evidence of an official first-party Comet skill path. Main risk is trust/provenance of the wrapper, not malicious behavior in the Opik setup flow.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 17, 2026, 06:19 AM

Package URL

pkg:socket/skills-sh/akillness%2Foh-my-skills%2Fopik%2F@c96dc047c716881beab9db6f4d24408abaed08c22a17a30f8dd533d6699a3a36