Apache Kafka Schema Extractor

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the functional purpose is plausible for a Kafka schema tool, but the main footprint shown is transitive installation of a remote skill with unclear provenance and unclear publisher/source consistency. This is not confirmed malware, but it carries medium risk because the fetched skill would handle API access and possibly credentials without enough visibility into its actual instructions.

Confidence: 83%Severity: 68%
Audit Metadata
Analyzed At
Mar 28, 2026, 05:51 PM
Package URL
pkg:socket/skills-sh/agentskillexchange%2Fskills%2Fapache-kafka-schema-extractor%2F@cb48d7fdc1e4813560f8db30d7be610e7ab8d58b