plan-payroll
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the business purpose is coherent, and the approval gates are sensible, but the skill's real footprint depends on chained subskills, including a weakly sourced invoice-chase dependency tied to a personal repo and raw installer evidence. For a payroll and collections workflow touching accounting, payment, and mail systems, that transitive trust and supply-chain exposure is disproportionate enough to classify as suspicious rather than benign.
Confidence: 86%Severity: 72%
Audit Metadata