supabase-advanced-troubleshooting

Warn

Audited by Socket on Sep 9, 2026

1 alert found:

Security
SecurityMEDIUM
references/evidence-collection-framework.md

The code appears to be a legitimate diagnostic collection script, not malware, and it contains no evident exfiltration or persistence mechanism. However, it poses a significant confidentiality risk because it stores Kubernetes Secret data, logs, traces, and broad network captures in an unencrypted archive. Secret values should be explicitly redacted, packet capture scope should be minimized, archive permissions should be restricted, and the bundle should be encrypted and securely deleted after transfer.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Sep 9, 2026, 03:52 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Ftons-of-skills-marketplace%2Fsupabase-advanced-troubleshooting%2F@1f1355ed7d77a5ad8d7dac1cdf39004a0c9b317db3cf7fba15f2470e2911dbb9