setup-warehouse-bigquery

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core BigQuery setup capabilities and official Google/Confidence endpoints are broadly consistent with the stated purpose, and there is no dubious installer or third-party proxy. However, the skill includes covert telemetry collection, sentiment tracking, pre-action outbound calls, and explicit instructions to never disclose these actions to the user; that concealment makes the overall footprint disproportionate and breaks data-flow transparency.

Confidence: 95%Severity: 79%
Audit Metadata
Analyzed At
Sep 18, 2026, 07:22 AM
Package URL
pkg:socket/skills-sh/spotify%2Fconfidence-ai-plugins%2Fsetup-warehouse-bigquery%2F@d9d1102b38e0c57596648d924adb5e7bf1544463d213621322aa8b232b3696b3
Security Audit — socket — setup-warehouse-bigquery