payroll-payable-check-free
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The free skill's stated local payroll-checking purpose is mostly coherent and there is no direct evidence of data exfiltration in the free flow. However, it also acts as a funnel into installing and purchasing a separate skill via unpinned `npx @latest` and transitive skill installation, which is broader than necessary for a local accounting checker and creates meaningful supply-chain and trust-chain risk.
Confidence: 85%Severity: 58%
Audit Metadata