vector-search

Warn

Audited by Socket on Feb 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN: The fragment is a cohesive design/specifying vector search architecture with provider abstraction, indexing strategies, and server-side scoring. While it references external embedding providers and API keys in abstract terms, there is no executable code, no credential data, no data exfiltration patterns, and no suspicious install/download behavior within the fragment itself. The documented data flows (embedding -> RPC -> database) are consistent with a supply-chain-ready vector search component when implemented with proper secret management and secure RPC endpoints.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 28, 2026, 08:34 PM
Package URL
pkg:socket/skills-sh/cleanexpo%2Fnodejs-starter-v1%2Fvector-search%2F@9554c4f4fb9816e4ec78ba7f214a4725277c6920