Falco Runtime Security

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core functionality is broadly consistent with Kubernetes/Falco runtime inspection, but the install path introduces medium trust risk because it requires a third-party `npx skills add` CLI from an unrelated org and creates a transitive skill trust chain. No clear malicious data exfiltration or credential-harvesting behavior is shown from the provided content.

Confidence: 80%Severity: 56%
Audit Metadata
Analyzed At
Mar 28, 2026, 06:47 PM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Ffalco-runtime-security%2F@1d4cdc7a65b054bae7e0fea1025cd8e44ef304cd