mongodb-crud

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/mongodb_crud.sh

No definitive evidence of hidden malware (no overt exfiltration targets, persistence, or backdoor behavior in this snippet). However, the module contains two high-impact execution primitives: it `source`s profile files (local Bash code execution if profiles are tampered with) and it executes arbitrary MongoDB shell JavaScript via `mongosh --eval` (especially through `raw-eval`, and also through JS generation for CRUD operations). Treat profile provenance and eval/inputs as fully trusted; otherwise, the security risk is substantial even if the tool is legitimate.

Confidence: 65%Severity: 65%
Audit Metadata
Analyzed At
Jul 15, 2026, 03:40 PM
Package URL
pkg:socket/skills-sh/finpeakinc%2Ffrevana-skills%2Fmongodb-crud%2F@ad72665b5dc54240a0a92936022e9f7eb9ce36cf7eccbca3f4e8bf6af957aa00
Security Audit — socket — mongodb-crud