kpi-definition-helper

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is not overtly malicious and shows no direct credential theft or exfiltration path, but its actual footprint is overly broad for its stated purpose. The main concerns are disproportionate unrestricted Bash access and a third-party distribution path with limited provenance evidence.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:48 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fkpi-definition-helper%2F@e2c3bf3de2f2ecafe5f22b2e60dd2d14b71fd83d48fd1b51ea0b32d86d5076bb