mssql
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s database-management purpose is coherent, but it relies on a non-Microsoft third-party CLI, forwards raw database credentials to it, and documents plaintext password storage in a local config file. The behavior is plausible for the stated task, yet the trust and credential-handling footprint is broader and riskier than a vendor-official SQL integration.
Confidence: 89%Severity: 80%
Audit Metadata