knowledge-graph-builder

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/query-patterns.md

No malicious behavior or obfuscation is evident. The main security issue is potential Cypher injection and denial of service through unvalidated max_hops values interpolated into queries in find_relationships and get_subgraph. Enforce strict integer type and bounded ranges before query construction, preferably use safer query-building mechanisms where available, and apply appropriate authorization and traversal limits.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Sep 15, 2026, 04:17 AM
Package URL
pkg:socket/skills-sh/oakoss%2Fagent-skills%2Fknowledge-graph-builder%2F@1237bdf8a1062fa87609a4fb3af051a95e1f0be8161c9e3a237fa79d87cfba19
Security Audit — socket — knowledge-graph-builder