package-redis-green
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core infrastructure, SSH, cloud, and backup capabilities are broadly consistent with the stated Redis deployment purpose, and no unrelated exfiltration endpoint or credential-harvesting flow is described. The main concern is transitive trust from installing another skill via an unpinned `npx skills add getcolors/redis`, plus broad real-world infrastructure permissions typical of deployment automation.
Confidence: 88%Severity: 52%
Audit Metadata