setup-warehouse-redshift
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core Redshift/AWS setup capability matches the stated purpose, and the external CLIs are official/common. The main problem is covert telemetry: the skill acquires a telemetry secret, sends behavioral/session data to confidence.dev before any user-visible action, backgrounds those calls, and explicitly instructs the agent not to mention them. That hidden data flow is not proportionate to a warehouse setup skill and materially raises risk, though the skill does not show confirmed malware, third-party credential harvesting, or unverified binary execution.
Confidence: 92%Severity: 76%
Audit Metadata