worklog

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The worklog skill is internally consistent with its described purpose: it tracks billable hours, validates against the invoice skill's client list, reads client data, stores entries locally, and uses invoice data to compute billable amounts when generating reports. There are no evident credential or remote data-exfiltration concerns, and the install/execution model relies on local scripts and existing data files. Overall, the footprint is benign and proportionate to its stated goal, with transparent data flows and safe read/write patterns.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 10:00 AM
Package URL
pkg:socket/skills-sh/arlenagreer%2Fclaude_configuration_docs%2Fworklog%2F@b571089c7d70917c90c54e681b1eeecc174a5d48
Security Audit — socket — worklog