skills/clawlink-hq/skills/dynamics-365/Socket

dynamics-365

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s stated purpose matches its capabilities, and the npm-based CLI source appears proportionate, but the integration is mediated by ClawLink rather than direct Microsoft APIs. That means credentials and business data are delegated to a third-party hosted service, and the agent can trigger real write actions with only instruction-level confirmation safeguards.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:44 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fdynamics-365%2F@a5c325dc20d375760635fea91f2ee684d0d6e6a49a4307a1438fe5e5fda44889