expanso-db2-to-bigquery

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated migration purpose is plausible, but the installation and execution details are internally inconsistent with official Expanso documentation: separate Clawhub installer, undocumented 'expanso' binary name, and mismatched run syntax. Required credentials are proportionate to the task, and no clear exfiltration endpoint is shown, but the missing pipeline and script contents leave key data flows unverifiable.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jul 26, 2026, 05:45 AM
Package URL
pkg:socket/skills-sh/expanso-io%2Fskills.expanso.io%2Fexpanso-db2-to-bigquery%2F@4abe05c331a225ed156d41a8b6dac977c451c5628c1668fd6d25414de2e06aec
Security Audit — socket — expanso-db2-to-bigquery