saas-metrics
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core SaaS metrics content is benign and aligned with its purpose, but the companion-check block adds unnecessary local enumeration and a transitive skill installation path to an unrelated third-party repo that is not verified as the same publisher. This is a medium-risk trust-expansion issue rather than confirmed malware.
Confidence: 90%Severity: 58%
Audit Metadata