ladybugdb
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The LadybugDB skill appears plausibly aligned with its stated purpose as an embedded graph database component with Cypher support. The use of npm install lbug suggests a standard distribution path. However, the description lacks specifics on input validation, query parameterization, runtime isolation, and backup/restore safety guarantees. Given potential Cypher injection risk in embedded contexts and the absence of explicit security controls, the footprint is generally benign but warrants cautious review of implementation details, especially around query composition and data export/backup handling.
Confidence: 98%
Audit Metadata