Database Sync
Warn
Audited by Socket on Jun 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The documented behavior matches a legitimate database-sync purpose, but the actual trust boundary is unclear because the backing MCP server/tools are not verifiable from the provided evidence. Risk is driven more by opaque execution backend and same-org but unpinned GitHub install patterns than by any confirmed malicious behavior in the skill content.
Confidence: 82%Severity: 56%
Audit Metadata