collecting-infrastructure-metrics
Warn
Audited by Socket on Mar 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose and capabilities are mostly coherent for infrastructure monitoring, and the named destinations are official services. However, it leaves install and execution details unspecified while granting broad Bash/system access, creating medium supply-chain and credential-forwarding risk if the agent chooses remote installer paths such as Datadog's curl|bash flow.
Confidence: 84%Severity: 52%
Audit Metadata