byted-redis

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/mcp_client.py

The fragment is a credential-forwarding wrapper that launches and communicates with a remote Redis MCP server. It contains no direct evidence of malware, credential theft, obfuscation, or destructive behavior. The unpinned GitHub dependency executed through uvx is a significant supply-chain risk, and the child process receives sensitive credentials and network configuration. Pin the repository to a verified commit or released hash, minimize forwarded environment variables, and review or sandbox the fetched server before use.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 21, 2026, 03:18 PM
Package URL
pkg:socket/skills-sh/bytedance%2Fagentkit-samples%2Fbyted-redis%2F@4a0a4da316b0f972ea412244f524f8c3abfebd7df8ef290ad733590554c1f1f4