performance

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill expands trust by telling the agent to install external skills through an unseen local installer. No direct malicious or exfiltration behavior is present here, yet the transitive installation path and partially unverifiable provenance make this a medium-risk skill rather than benign.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Sep 19, 2026, 09:46 AM
Package URL
pkg:socket/skills-sh/alvarovillalbaa%2Fplugins%2Fperformance%2F@96320b762170174d0b1ba37694df882f40f51a43ca925b0797ad9947d3498c5e