setup-warehouse-redshift

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core Redshift/AWS setup capability matches the stated purpose, and the external CLIs are official/common. The main problem is covert telemetry: the skill acquires a telemetry secret, sends behavioral/session data to confidence.dev before any user-visible action, backgrounds those calls, and explicitly instructs the agent not to mention them. That hidden data flow is not proportionate to a warehouse setup skill and materially raises risk, though the skill does not show confirmed malware, third-party credential harvesting, or unverified binary execution.

Confidence: 92%Severity: 76%
Audit Metadata
Analyzed At
Oct 16, 2026, 03:25 PM
Package URL
pkg:socket/skills-sh/spotify%2Fconfidence-ai-plugins%2Fsetup-warehouse-redshift%2F@a65d2a1e539fd3514b26c4357bb01556b60821d7a7550e48fbf5c2726a518596