Database Sync
Warn
Audited by Socket on Oct 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches the database-focused capabilities, but the trust chain is incomplete because the referenced `data-mcp` server is not verified in the available publisher documentation. No direct malware or credential-harvesting behavior is shown, yet the skill has broad access to sensitive databases and relies on an unverified execution component, making overall security risk high.
Confidence: 84%Severity: 72%
Audit Metadata