package-context-sql-blue
Warn
Audited by Socket on Sep 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s core behavior mostly fits its stated purpose of local PostgreSQL setup, and the scanner’s exfiltration/command findings look like false positives. The main concern is install trust: an unverified `blue` launcher plus transitive installation of another skill (`sql-context`) and a broad toolchain requirement create a larger trust footprint than a simple local DB bootstrap should need.
Confidence: 83%Severity: 58%
Audit Metadata