rails-knowledge-patch

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
references/database-config.md

Most of the fragment is standard Rails/ActiveRecord configuration guidance. The key supply-chain risk is the SQLite `extensions` entry that loads a native `.so` from a relative bundled path via `database.yml`, which—if the artifact is tampered with—can enable native code execution in the application/SQLite runtime context. Transaction isolation and connection pooling changes are comparatively lower concern, and invisible index toggling is mainly an operational/query-behavior feature. Verify provenance and integrity (build pipeline, artifact signing/hashes, and runtime path validation) of the referenced native extension before use.

Confidence: 60%Severity: 68%
Audit Metadata
Analyzed At
Apr 7, 2026, 02:37 AM
Package URL
pkg:socket/skills-sh/nevaberry%2Fnevaberry-plugins%2Frails-knowledge-patch%2F@6328c6449e0f5c549143894de920996e9ae84660
Security Audit — socket — rails-knowledge-patch