skills/leonchaox/qinyan-academic-skills/drugbank-database/Socket

drugbank-database

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's purpose and capabilities are coherent for DrugBank research, and data appears intended to flow to official DrugBank endpoints. The main concern is credential forwarding through a non-official third-party package (drugbank-downloader), which creates moderate supply-chain and credential-handling risk without clear evidence of malware or exfiltration.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Mar 31, 2026, 08:25 AM

Package URL

pkg:socket/skills-sh/LeonChaoX%2Fqinyan-academic-skills%2Fdrugbank-database%2F@26ebae80787f1ce878a48baf0f9f24f8e9260f0f