scorable-otel-evaluation

Warn

Audited by Socket on May 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill is purpose-aligned for Scorable-based tracing and evaluation, but it carries medium risk because it installs external tooling, forwards API keys to that tooling/service, exports potentially sensitive LLM telemetry to a third-party backend, and invokes another skill transitively. This looks more like a risky observability/integration skill than malware.

Confidence: 84%Severity: 64%
Audit Metadata
Analyzed At
May 5, 2026, 12:28 PM
Package URL
pkg:socket/skills-sh/root-signals%2Fscorable-skills%2Fscorable-otel-evaluation%2F@641d6e1db8da564f14c63dab4d66ec8af13f8d5b