skills/alvarovillalbaa/plugins/performance/Socket

performance

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is benign and domain-aligned, but the skill's footprint includes transitive installation of external skills through an unseen local installer. There is no direct evidence of credential theft or malicious exfiltration in this file, yet the trust chain and unverifiable installer behavior make the skill medium-to-high risk.

Confidence: 84%Severity: 68%

Audit Metadata

Analyzed At

Jul 5, 2026, 04:26 PM

Package URL

pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fperformance%2F@81e8dc89cdd12cc62e4b147dc9b38e5586e66c752e257276a101a28becdb69fe