benchmark

Warn

Audited by Socket on Nov 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core benchmarking behavior is legitimate, but the skill's footprint is much broader than its stated purpose. Same-org install evidence reduces supply-chain concern, yet the heavy preamble, repo modification flows, telemetry/artifact sync, and reliance on numerous opaque local executables make it higher-risk than a normal performance skill.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Nov 8, 2026, 09:19 AM
Package URL
pkg:socket/skills-sh/ivansamartino%2Fgstack%2Fbenchmark%2F@e7ca249e96df64cddc4a6c0f1b4226f4447519e0