ecosystem-database

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated database-orchestration purpose is plausible, but the actual footprint relies on an unreviewed installer script and transitive installation of multiple unspecified skills. No direct credential theft or exfiltration is shown, but install trust is insufficiently verifiable and the downstream skill chain materially raises risk.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Sep 25, 2026, 10:52 PM
Package URL
pkg:socket/skills-sh/fatih-developer%2Ffth-skills%2Fecosystem-database%2F@25119906a0c601c0831bae37b9dd9684aecd4f89b9c0276f740e92b961d3a16a