atuin

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
references/sync-setup.md

No direct malicious behavior is evident in this documentation. The content describes legitimate Atuin synchronization setup, but several instructions create security exposure: direct execution of an unverified remote installer, mutable `latest` images, open registration, publicly bound services, a weak hardcoded database password, plaintext key backups, and optional HTTP synchronization. These should be hardened before production use.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 18, 2026, 06:12 PM
Package URL
pkg:socket/skills-sh/julianobarbosa%2Fclaude-code-skills%2Fatuin%2F@097a633747a4cb5ec12a87e9bd357b4b675a26239c672bef4630d75dce37ab04