drugbank-database

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and capabilities are coherent for DrugBank research, and data appears intended to flow to official DrugBank endpoints. The main concern is credential forwarding through a non-official third-party package (drugbank-downloader), which creates moderate supply-chain and credential-handling risk without clear evidence of malware or exfiltration.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Jun 26, 2026, 08:00 PM
Package URL
pkg:socket/skills-sh/qinyan-ai%2Fqinyan-academic-skills%2Fdrugbank-database%2F@4e462071ad2f67a1ee2d6c32db11522f87fa65c102b8e9d09c27a53a5623f4a5