sesion-workflow-clinic

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly coherent for a clinic platform, but it combines sensitive mental-health data, tax/payment credentials, autonomous messaging, and external AI transfer. The biggest concern is provenance mismatch between ara.so as publisher and a separate personal GitHub repo as the install source, plus use of unofficial WhatsApp automation for patient data.

Confidence: 87%Severity: 66%
Audit Metadata
Analyzed At
Jul 20, 2026, 07:40 AM
Package URL
pkg:socket/skills-sh/aradotso%2Fdevtools-skills%2Fsesion-workflow-clinic%2F@0b714ee828fa77cc4254286f321a927bf99c449ce3c4a8786987115f07a901df
Security Audit — socket — sesion-workflow-clinic