skills/m1heng/just-cli-it/signoz-cli/Socket

signoz-cli

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s functionality is coherent and data flows appear directly to SigNoz, but trust is reduced because it installs and uses a third-party personal CLI to handle SigNoz API credentials. This is not overtly malicious, yet credential forwarding to non-official tooling and global executable install make it medium risk.

Confidence: 85%Severity: 53%

Audit Metadata

Analyzed At

Mar 30, 2026, 02:31 PM

Package URL

pkg:socket/skills-sh/m1heng%2Fjust-cli-it%2Fsignoz-cli%2F@c6bb63e5fa6ff3c9ed5f31abeff5cf16ecb6b329