Apache Kafka Schema Extractor
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the functional purpose is plausible for a Kafka schema tool, but the main footprint shown is transitive installation of a remote skill with unclear provenance and unclear publisher/source consistency. This is not confirmed malware, but it carries medium risk because the fetched skill would handle API access and possibly credentials without enough visibility into its actual instructions.
Confidence: 83%Severity: 68%
Audit Metadata