perf-benchmarker
Fail
Audited by Socket on Mar 10, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill appears to be a focused benchmarking utility with a coherent purpose and straightforward data flow. The primary security concern is potential command injection risk stemming from accepting and executing a user-provided benchmark command without explicit sanitization or whitelisting. Other risks (data exposure via logs/stdout, lack of explicit per-run user confirmation) are comparatively lower but worth monitoring. Overall, the footprint is benign and proportionate to benchmarking tooling, but security-conscious developers should ensure strict command validation, access controls, and careful handling of benchmark outputs to prevent leakage of sensitive data.
Confidence: 98%
Audit Metadata