data-backup

Fail

Audited by Socket on Feb 27, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

This document describes a local, script-driven backup system for project files with sensible features (cleaning notebooks, rolling daily backups, compressed milestones, and a CHANGELOG). There are no indicators of malicious behavior, remote credential exfiltration, or download-and-execute supply-chain patterns in the provided text. The main security concerns are operational: backup/restore and auto-cleanup are destructive by nature and can cause data loss if scripts are implemented without safe checks, proper input sanitization, and robust confirmation prompts. If you plan to use the described scripts, review the actual backup_project.sh implementation for: (1) safe handling of user input to avoid command injection, (2) explicit confirmation and atomic operations for restore/overwrite actions, (3) dry-run or logging modes before deletion, and (4) no implicit forwarding of credentials or uploading to third-party endpoints. Overall, the content appears benign but review the concrete shell scripts before running them on critical data.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 27, 2026, 02:03 PM
Package URL
pkg:socket/skills-sh/delphine-l%2Fclaude_global%2Fdata-backup%2F@e0a7c48f084b420e7b981e6286acc49d14465a89