plan-payroll

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the business purpose is coherent, and the approval gates are sensible, but the skill's real footprint depends on chained subskills, including a weakly sourced invoice-chase dependency tied to a personal repo and raw installer evidence. For a payroll and collections workflow touching accounting, payment, and mail systems, that transitive trust and supply-chain exposure is disproportionate enough to classify as suspicious rather than benign.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Sep 16, 2026, 12:04 PM
Package URL
pkg:socket/skills-sh/anthropics%2Fknowledge-work-plugins%2Fplan-payroll%2F@d8dc978d360c56805e6245506bb00ed407f29f9a8026f4a97a2e0aa8d4422ec1