trace-analytics

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core trace-analysis purpose is legitimate and mostly matched by the OpenSearch access patterns, but trust and data-flow issues make the footprint broader than ideal. Main concerns are the unpinned @latest MCP install, optional third-party ddg-search dependency from an unrelated personal repo, credential forwarding into an external CLI, and TLS verification disabled in curl examples.

Confidence: 91%Severity: 69%
Audit Metadata
Analyzed At
Sep 15, 2026, 11:20 AM
Package URL
pkg:socket/skills-sh/opensearch-project%2Fopensearch-agent-skills%2Ftrace-analytics%2F@d3ec6b446f261a85ab9ba9406680dcbdf44fcbf02f74b95f191c0f3c99831bc9