SQLite MCP Server
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s footprint is not malicious, but it is internally inconsistent: it claims to provide SQLite MCP access while directing users to install official Memory and Git server packages instead of a SQLite package. Risk comes from misleading installation guidance and unpinned dependency instructions, not from credential theft or exfiltration.
Confidence: 94%Severity: 52%
Audit Metadata