package-context-sql-blue

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core behavior mostly fits its stated purpose of local PostgreSQL setup, and the scanner’s exfiltration/command findings look like false positives. The main concern is install trust: an unverified `blue` launcher plus transitive installation of another skill (`sql-context`) and a broad toolchain requirement create a larger trust footprint than a simple local DB bootstrap should need.

Confidence: 83%Severity: 58%
Audit Metadata
Analyzed At
Sep 17, 2026, 08:32 AM
Package URL
pkg:socket/skills-sh/getcolors%2Fcontext-sql%2Fpackage-context-sql-blue%2F@f273d5225afc698f37b1fc7c25a93ac52ef64ba7497ff5e9b8f0d5439891a586