cubrid-grill-and-implement

Warn

Audited by Socket on Jul 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent for a CUBRID development workflow, and its network/data flows mostly match that purpose, but it is high-trust and moderately risky because it combines broad Bash access, file editing, subagent spawning, and ingestion of untrusted PR/JIRA/repo content. This looks like a powerful engineering automation skill rather than malware, but it should be treated as medium-risk due to prompt-injection and autonomous code-modification exposure.

Confidence: 87%Severity: 63%
Audit Metadata
Analyzed At
Jul 3, 2026, 01:22 AM
Package URL
pkg:socket/skills-sh/vimkim%2Fmy-cubrid-skills%2Fcubrid-grill-and-implement%2F@9870e90e0bd0a073262078d1b69a94f363d6c1d4531551522cb8a70e06bf41d7