looker-performance-optimizer

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s core capabilities largely fit Looker performance tuning, but it grants an AI agent high-impact autonomy: executing diagnostics on production-connected systems, editing LookML, and deploying to production. Tooling/data flows are mostly legitimate for the purpose, yet the combination of autonomous production actions, unpinned external tooling references, and processing untrusted SQL/plan content raises the overall risk above benign.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Jul 27, 2026, 12:07 PM
Package URL
pkg:socket/skills-sh/looker-open-source%2Flooker-skills%2Flooker-performance-optimizer%2F@00142dbf261e08b3642be085c6908f7ce44c7d7ccfd37e9ab69d7b98950ad533
Security Audit — socket — looker-performance-optimizer