fetch-meta-from-kb

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose: it securely reads DB connection details from environment sources, queries the journals table for recent records, and emits a JSON array containing only doi, title, abstract, and date. There are no external dependencies or credential forwarding observed. The risk profile is low for data leakage, with moderate considerations for secret management practices around the DB credentials.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 03:21 PM
Package URL
pkg:socket/skills-sh/tiangong-ai%2Fskills%2Ffetch-meta-from-kb%2F@39e1760e057531a28d561c06debba4131c9ae296