speak-observability

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core observability behavior is coherent and the documented API call goes to Speak’s own domain, but the skill depends on a separate install/auth skill and an SDK whose official provenance could not be verified from primary Speak sources. The skill is not overtly malicious, yet its transitive trust and broad shell permissions make it higher risk than a normal documentation-only skill.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:55 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fspeak-observability%2F@0c71d36d6ff5a378f5396065f02451319b3a69b58da9f2ee6d798adb052f6549
Security Audit — socket — speak-observability