bigquery

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The documented operations match a BigQuery skill, but the skill centers on a nonstandard `bigquery` CLI with unclear provenance and no verifiable install path, while handling Google credentials and optionally exposing MCP write actions. This is not confirmed malware, but the trust chain is weak enough to classify as suspicious rather than benign.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Apr 29, 2026, 05:58 PM
Package URL
pkg:socket/skills-sh/lanej%2Fdotfiles%2Fbigquery%2F@a84bea4d774c4ae0edb89be48dc6158ba3801660