doppler-bench

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Doppler bench skill appears coherent with its stated purpose: it coordinates repeatable benchmarks, uses documented node/npm tooling, and saves artifacts in an organized vendor-results workflow. There are no evident credential reads, unauthorized data flows, or untrusted binary installations. The data flow is contained to local artifacts and registry files, with outputs designed for reproducibility and comparison. Overall risk is low to moderate (primarily due to being a tooling orchestration skill with filesystem artifacts); no red flags indicating credential harvesting, exfiltration, or malicious behavior are present based on the provided materials.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 11:44 PM
Package URL
pkg:socket/skills-sh/clocksmith%2Fdoppler%2Fdoppler-bench%2F@0e8e940111c11c30999282c36c2e579d1c8fb71d