collecting-infrastructure-metrics

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities are mostly coherent for infrastructure monitoring, and the named destinations are official services. However, it leaves install and execution details unspecified while granting broad Bash/system access, creating medium supply-chain and credential-forwarding risk if the agent chooses remote installer paths such as Datadog's curl|bash flow.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Mar 18, 2026, 07:29 PM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fcollecting-infrastructure-metrics%2F@edbbb1be02ac7af50a3da50bb6f55bf68c3f5cbd