skills/witooh/skills/state-db/Socket

state-db

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is purpose-aligned as a state storage layer and contains no installer or hidden execution behavior, but it asks for a JWT signing secret and sends bearer-authenticated data to an unconstrained self-hosted endpoint. The main risk is trust in the arbitrary PostgREST URL and broad shared-state access, not malware.

Confidence: 90%Severity: 62%

Audit Metadata

Analyzed At

Sep 25, 2026, 03:58 PM

Package URL

pkg:socket/skills-sh/witooh%2Fskills%2Fstate-db%2F@6fe246bf9ade5462535b73c2c7e19c6db054a5f12a90e02f111cb42db47b9c16