Invoice Automation

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The business purpose and stated capabilities are coherent for invoice automation, and there is no direct malware pattern in the skill text. Risk comes from the undefined `accounting-mcp` intermediary: its provenance is not verified, and it may receive sensitive financial data and credentials before relaying to vendor APIs. Treat as medium risk unless the MCP server is confirmed to be official, same-org, and directly documented.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Oct 22, 2026, 12:17 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Finvoice-automation%2F@ca1bcee383b7f7f8bedd8bb8cadce76ee7f783352edc43be89e27a1fb9767121