jupyter-notebook

Fail

Audited by Socket on Feb 16, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

[Skill Scanner] Installation of third-party script detected Benign overall with moderate credential exposure risk if tokens appear in logs or shell history. The content matches a legitimate notebook execution guide, though care should be taken to secure environment variables and to avoid unintended in-place file overwrites. No malware indicators or covert data flows detected in the fragment itself. LLM verification: The document is a legitimate usage guide for executing Jupyter notebooks and integrating a Databricks kernel. There is no direct evidence of malicious code in the provided file. However, it instructs high-risk operational behaviors: installing an unpinned third-party kernel package, executing arbitrary notebooks (which can run arbitrary code), overwriting notebooks in-place, and using sensitive environment variables without secure handling guidance. These represent moderate supply-chain and oper

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 16, 2026, 10:45 AM
Package URL
pkg:socket/skills-sh/i9wa4%2Fdotfiles%2Fjupyter-notebook%2F@20c659ec51bcea863246a2f801cf48bb864a6b37