harness-check

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s risky actions are largely aligned with its stated purpose of generating comprehensive native telemetry, but it intentionally performs high-impact probes and limits user visibility into the full manual checklist. No explicit third-party credential exfiltration is shown in the provided text, yet the local scripts and generated behaviors create substantial operational risk and warrant careful sandboxing and code review before use.

Confidence: 85%Severity: 71%
Audit Metadata
Analyzed At
Sep 10, 2026, 03:40 PM
Package URL
pkg:socket/skills-sh/tenzir%2Ftenzir-demo-skills%2Fharness-check%2F@6d0eb753655c3d95232ce3e77f5cf87f83e1767275d6ddd8031dc1cee6f04e63
Security Audit — socket — harness-check