cli-anything-chromadb

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated capabilities are coherent for a ChromaDB CLI, and its data flow to a ChromaDB server is proportionate to purpose. The main issue is install trust: the advertised pip package could not be verified and appears inconsistent with same-org source docs, so users may be directed to a package name that is unpublished, squatted, or otherwise unverifiable at install time.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 05:24 PM
Package URL
pkg:socket/skills-sh/hkuds%2Fcli-anything%2Fcli-anything-chromadb%2F@99e29d2e756ecc123506fca12ac9577ab243661cdbda2dfd3299a460a1827265