dotnet-trace-collect

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Anomaly
AnomalyLOW
references/perfcollect.md

The content is legitimate-looking profiling documentation, not evidence of malware by itself. The primary risks are executing an unverified remote script as root and recommending a fully privileged Kubernetes sidecar with shared process visibility and storage. Review the downloaded script, pin and verify its source or checksum, use a trusted minimal image, and minimize privileges where possible. No direct malicious behavior is demonstrated in the supplied fragment.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Oct 11, 2026, 05:11 AM
Package URL
pkg:socket/skills-sh/managedcode%2Fdotnet-skills%2Fdotnet-trace-collect%2F@754c7f3048f14a6b911a25abe566995c3a63f81dd58d4566086ad0aae298effa