lakebase-setup

Fail

Audited by Socket on Mar 6, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

This is a legitimate and coherent operational guide for configuring Lakebase as persistent memory for an agent. I found no code-level malware, obfuscated payloads, or external exfiltration endpoints. Primary security concerns are operational: the instructions require privileged role creation and grant broad schema/table privileges; they provide raw SQL execution examples and copy-pastable admin snippets without explicit safeguards. Recommend: (1) enforce least-privilege grants where possible, (2) add verification steps to confirm correct service-principal identity before granting, (3) warn operators about running raw SQL and printing identifiers (advise use of secure secret stores and avoid logging sensitive values), and (4) advise auditing/grant expiration and use of read-only roles where applicable.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 6, 2026, 11:30 AM
Package URL
pkg:socket/skills-sh/databricks%2Fapp-templates%2Flakebase-setup%2F@d392f953dcd676c944e94734c5bb7d4aefd75494