package-redis-green

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core infrastructure, SSH, cloud, and backup capabilities are broadly consistent with the stated Redis deployment purpose, and no unrelated exfiltration endpoint or credential-harvesting flow is described. The main concern is transitive trust from installing another skill via an unpinned `npx skills add getcolors/redis`, plus broad real-world infrastructure permissions typical of deployment automation.

Confidence: 88%Severity: 52%
Audit Metadata
Analyzed At
Sep 18, 2026, 03:30 PM
Package URL
pkg:socket/skills-sh/getcolors%2Fredis%2Fpackage-redis-green%2F@0c59a8243ee9fcc5221da807d5e7e356bd728dac80f6d51bc39ab5114a68fbce