skills/dontbesilent2025/dbskill/dbs-update/Socket

dbs-update

Warn

Audited by Socket on Aug 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its behavior, but it updates by invoking a third-party CLI and transitive remote skill installation from an unpinned GitHub repo. This is coherent for an updater skill, yet carries medium-high supply-chain risk rather than clear malicious intent.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

Aug 15, 2026, 04:26 AM

Package URL

pkg:socket/skills-sh/dontbesilent2025%2Fdbskill%2Fdbs-update%2F@aeb990c56505ea6d1102bdc4a6b08268a628f9d8eadbd0445f25a9811125dfd6