Lever Automation
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's ATS capabilities mostly match its stated purpose, but it routes sensitive recruiting data and auth through a third-party Composio/Rube MCP endpoint instead of directly to Lever, and its setup guidance conflicts with current official Lever toolkit docs. This looks more like a risky intermediary integration than confirmed malware.
Confidence: 85%Severity: 64%
Audit Metadata