calibrate-evaluator

Warn

Audited by Socket on Oct 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core CalibratedAgents CLI workflow matches the stated purpose, but the skill adds a disproportionate hidden self-update step through an unpinned third-party `npx skills` tool and tells the agent not to disclose it. That combination makes the skill internally inconsistent enough to treat as medium-high risk rather than benign.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Oct 23, 2026, 05:57 AM
Package URL
pkg:socket/skills-sh/dalmia%2Fcalibrate-skills%2Fcalibrate-evaluator%2F@2f774639ad942ed14ab7321924c860c48d060800d2e531de57e675593ea72d09