database-optimization

Warn

Audited by Socket on Feb 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

This skill appears to be a benign, coherent database optimization guide with supporting helper code for Prisma/PostgreSQL. It does include code that executes raw SQL and performs schema-modifying actions (CREATE TABLE partitions, DROP TABLE), and it interpolates identifiers/values into raw queries. Those patterns are appropriate for a DB-admin tool but carry operational and security risk if inputs are untrusted or if the code is run with elevated privileges in production without safeguards. There are no signs of credential harvesting, remote downloads, obfuscation, or exfiltration to attacker-controlled endpoints. Recommendations: ensure raw SQL identifier/value interpolation is properly sanitized or parameterized, add explicit checks/confirmations or dry-run modes before destructive DDL (DROP TABLE), and run with least privilege credentials.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 26, 2026, 02:31 PM
Package URL
pkg:socket/skills-sh/doanchienthangdev%2Fomgkit%2Fdatabase-optimization%2F@b4966b8e5d49a3148a815b81854fa4e9c447eea2