perf-benchmarker

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill appears to be a focused benchmarking utility with a coherent purpose and straightforward data flow. The primary security concern is potential command injection risk stemming from accepting and executing a user-provided benchmark command without explicit sanitization or whitelisting. Other risks (data exposure via logs/stdout, lack of explicit per-run user confirmation) are comparatively lower but worth monitoring. Overall, the footprint is benign and proportionate to benchmarking tooling, but security-conscious developers should ensure strict command validation, access controls, and careful handling of benchmark outputs to prevent leakage of sensitive data.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 03:49 PM
Package URL
pkg:socket/skills-sh/avifenesh%2Fawesome-slash%2Fperf-benchmarker%2F@b5e5881f359d312f2f50f902ccb851dbdf0fcb9b