sesion-mental-health-saas
Warn
Audited by Socket on Jul 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the capability set broadly matches a clinic SaaS, but the install trust is inconsistent because a skill published as ara.so directs the agent to clone and execute an unrelated personal GitHub repo. Sensitive clinical, billing, payment, and messaging credentials are extensive yet mostly proportional to the claimed product; the main risk is third-party code execution plus external handling of confidential patient data.
Confidence: 89%Severity: 72%
Audit Metadata