postgres-pro

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/backup_pg.py

No clear malicious behavior or obfuscated payload is present. The code performs expected PostgreSQL backup and restore operations. Security concerns include SQL injection through the database name, path traversal or arbitrary file manipulation through backup_name, backup_file, and tampered history paths, exposure of database backups, and execution of SQL from untrusted restore archives. Inputs should be validated, SQL identifiers safely quoted or restricted, paths confined to the backup directory, and secrets handled through a secure credential mechanism.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Sep 23, 2026, 08:06 AM
Package URL
pkg:socket/skills-sh/xgaisystems%2Fclaude-supercode-skills-404kidwiz%2Fpostgres-pro%2F@023a05c428e1e1b7ad79f605d7c2f7b4b3056dc83365cd21e427a495b9a06e7a
Security Audit — socket — postgres-pro