speak-observability
Warn
Audited by Socket on Sep 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core observability behavior is coherent and the documented API call goes to Speak’s own domain, but the skill depends on a separate install/auth skill and an SDK whose official provenance could not be verified from primary Speak sources. The skill is not overtly malicious, yet its transitive trust and broad shell permissions make it higher risk than a normal documentation-only skill.
Confidence: 85%Severity: 56%
Audit Metadata