yb-model

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/ybm/catalog.py

The fragment appears to implement database dump replay and catalog extraction, not malware. It has SQL-injection risks in interpolated database identifiers and generated repair statements, with potentially destructive effects if inputs are attacker-controlled. The shown syntax error prevents execution as provided.

Confidence: 99%Severity: 58%
Audit Metadata
Analyzed At
Oct 12, 2026, 04:45 PM
Package URL
pkg:socket/skills-sh/yugabyte%2Fyugabytedb-skills%2Fyb-model%2F@9a77c8faac1bbacab47bd736531e1dd8c7bff31bbf0638b433b9b725489b5e09