sqlite-crud

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/sqlite_crud.sh

No clear evidence of embedded malware, network exfiltration, cryptomining, or destructive behavior in the script itself. The primary security risk is that profile files are loaded using `source`, meaning any code placed in those profile config files will execute when the tool runs. Separately, the tool supports `raw-sql` execution and constructs SQL from user inputs (and text-substitutes parameters), which can lead to SQL injection against the target database if misused. Overall: likely legitimate utility with a high-impact design choice (`source`), but not demonstrably malicious in this fragment.

Confidence: 72%Severity: 62%
Audit Metadata
Analyzed At
Jul 15, 2026, 03:40 PM
Package URL
pkg:socket/skills-sh/finpeakinc%2Ffrevana-skills%2Fsqlite-crud%2F@7ff344d35dfea60ca376abed9f8c1a07d4203c180a75402b60e5a24aa55425c0
Security Audit — socket — sqlite-crud