performance-optimization
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose is coherent and the named external references are mostly official, but the skill expands into runtime/infra access and instructs loading an unverified `agent-tools` dependency while also executing repository-defined Bun scripts. This is not malicious on its face, but the transitive trust and local-script execution make it higher risk than a pure documentation skill.
Confidence: 84%Severity: 52%
Audit Metadata