afas
Warn
Audited by Socket on May 12, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is internally coherent and not overtly malicious, but its core design routes AFAS credentials and HR data through Apideck as a third-party intermediary and exposes a broad proxy path. This fits the stated purpose of a unified API connector, yet carries medium security risk from credential forwarding and expanded data-flow scope.
Confidence: 85%Severity: 57%
Audit Metadata