dotnet-observability

Fail

Audited by Socket on Mar 5, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

This module is a benign documentation/skill package describing how to configure OpenTelemetry and health checks for .NET apps. I found no indications of obfuscated or malicious code, no hard-coded credentials, and no remote-execution instructions. The relevant security concerns are operational: telemetry export can leak sensitive application data if endpoints are misconfigured or collectors are untrusted, and permissive dependency version ranges increase supply-chain risk. Recommend: pin dependency versions, enforce authenticated/approved collector endpoints, apply network egress controls, redact sensitive fields from telemetry/logs, and document sampling and retention controls.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 5, 2026, 09:32 PM
Package URL
pkg:socket/skills-sh/rudironsoni%2Fdotnet-harness-plugin%2Fdotnet-observability%2F@e932da5cdccd4569a71f354bd3d4c1a702166abe