redis
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Redis installation and operation guidance aligns with the skill's purpose and mostly uses expected sources, so this is not malicious. However, the skill expands scope by adding a third-party redis-commander container and forwarding Redis credentials to it, plus it relies on mutable image tags without verification. Overall this is coherent but medium-risk from supply-chain and credential-forwarding exposure.
Confidence: 91%Severity: 58%
Audit Metadata