dm8-tools

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/dm8_query.py

No clear malicious payload or supply-chain backdoor is present. The code is a database administration/query utility, but it has significant security impact by design: it accepts arbitrary SQL, supports privileged SYSDBA use, commits write operations, and exposes passwords through command-line arguments. The code should be restricted to trusted users and preferably use least-privileged accounts, secure secret handling, explicit read-only controls, and reliable finally-based resource cleanup. The shown fragment is syntactically incomplete.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:43 AM
Package URL
pkg:socket/skills-sh/huangzt%2Fmy-agent-skills%2Fdm8-tools%2F@08288cf50faeae3160d903a113d717e48eb1de2e9b8030e1a133e3fad3c122d8
Security Audit — socket — dm8-tools