skills/blunotech-dev/agents/broken-access-control/Socket

broken-access-control

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Anomaly

Anomalyreferences/models.md

LOW

AnomalyLOW

references/models.md

No malicious behavior is evident. The principal issue is a tenant-isolation bug in the demonstrated query: the second where property overwrites the tenant filter. The global-scope example is also limited to findMany, so it should not be treated as comprehensive tenant isolation.

Confidence: 99%Severity: 55%

Audit Metadata

Analyzed At

Oct 5, 2026, 07:45 AM

Package URL

pkg:socket/skills-sh/blunotech-dev%2Fagents%2Fbroken-access-control%2F@972e7ffb366290690e598f5e00138599a59e65739bec69de5f3aa3b65df32a0e