greptimedb-quickstart

Warn

Audited by Socket on Sep 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent and the endpoints/install sources are mostly same-org official infrastructure, but it meaningfully expands trust through raw-script installation, unpinned package install, and transitive loading of additional skills. I found no evidence of credential theft, unrelated data routing, or fundamentally incompatible behavior; the main concerns are supply-chain and remote-instruction trust, not confirmed malware.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Sep 11, 2026, 10:45 AM
Package URL
pkg:socket/skills-sh/greptimeteam%2Fdocs%2Fgreptimedb-quickstart%2F@89ea7a2ab7060270123c989e294ca6cfdcb2e1fa4db63310eaabd2ec6e6f5f72