trace-analytics
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core trace-analysis purpose is legitimate and mostly matched by the OpenSearch access patterns, but trust and data-flow issues make the footprint broader than ideal. Main concerns are the unpinned @latest MCP install, optional third-party ddg-search dependency from an unrelated personal repo, credential forwarding into an external CLI, and TLS verification disabled in curl examples.
Confidence: 91%Severity: 69%
Audit Metadata