mssql

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s database-management purpose is coherent, but it relies on a non-Microsoft third-party CLI, forwards raw database credentials to it, and documents plaintext password storage in a local config file. The behavior is plausible for the stated task, yet the trust and credential-handling footprint is broader and riskier than a vendor-official SQL integration.

Confidence: 89%Severity: 80%
Audit Metadata
Analyzed At
Sep 23, 2026, 06:59 AM
Package URL
pkg:socket/skills-sh/billpeet%2Fagent-skills%2Fmssql%2F@d72015fa4dd408c8b8b58f4a65df5a0a01bb9f4b1473a3514cfd4f1225d36a04