drugbank-database

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s capabilities broadly match its DrugBank research purpose, but it asks users to route DrugBank credentials through a third-party package instead of official DrugBank tooling. This is not confirmed malware, yet it creates meaningful credential-forwarding and supply-chain risk despite otherwise proportionate scope.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Mar 13, 2026, 03:48 AM
Package URL
pkg:socket/skills-sh/wu-yc%2FLabClaw%2Fdrugbank-database%2F@62c0b319f2120eb49dd9b28f0f053723988865ec