finops

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated FinOps purpose is narrower than its actual operational footprint: it mandates broad dev-process behavior, persistent memory writes, terminal execution, and reliance on two unseen downstream skills. There is no clear malicious exfiltration or hostile installer, but the transitive-skill dependency and oversized scope make the low-risk self-classification unsupported.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Sep 25, 2026, 10:02 AM
Package URL
pkg:socket/skills-sh/galyarderlabs%2Fgalyarder-framework%2Ffinops%2F@89fce053044cfbc7a566d8d1aaa6337e3bfd6755a8793fd6c9d83550d6053b78