saas-metrics

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core SaaS metrics content is benign and aligned with its purpose, but the companion-check block adds unnecessary local enumeration and a transitive skill installation path to an unrelated third-party repo that is not verified as the same publisher. This is a medium-risk trust-expansion issue rather than confirmed malware.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Mar 23, 2026, 01:04 PM
Package URL
pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Fsaas-metrics%2F@5d9e0536cad49aa0ce248fd87c0f530921802af2
Security Audit — socket — saas-metrics