work-management

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are internally coherent for IBM i work management, and its references point to legitimate IBM SQL services. The main issue is trust: it depends on an `ibmi` CLI whose provenance is not verified by the provided evidence and gives no install source, so the external executable is a black box. No clear credential harvesting or third-party exfiltration is shown, but the unverifiable required CLI makes the overall security risk high.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Apr 28, 2026, 08:28 PM
Package URL
pkg:socket/skills-sh/ajshedivy%2Fibmi-agent-skills%2Fwork-management%2F@1c2d0b01e0c14175fef31f52a8e8d4f45d4b3287