kpi-definition-helper
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is not overtly malicious and shows no direct credential theft or exfiltration path, but its actual footprint is overly broad for its stated purpose. The main concerns are disproportionate unrestricted Bash access and a third-party distribution path with limited provenance evidence.
Confidence: 86%Severity: 58%
Audit Metadata