edgedb
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's core behavior matches its stated EdgeDB purpose, and the CLI appears to be an official Membrane package, so this is not confirmed malware. However, it routes authentication, credentials, and database operations through Membrane as an intermediary and uses unpinned executable installs, creating a meaningful trust and data-flow risk that is higher than a direct EdgeDB client integration.
Confidence: 86%Severity: 56%
Audit Metadata