skills/dozaldevs/dozaldevs-skills/hire-ai-employee/Socket

hire-ai-employee

Warn

Audited by Socket on Oct 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill's behavior mostly matches its stated purpose, and the visible command examples are normal documentation. The main issue is trust: all sensitive actions rely on an externally installed `dozaldevs` CLI whose provenance and release integrity are not verifiable from the provided evidence, plus a transitive dependency on another skill for installation and auth.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Oct 30, 2026, 04:59 PM

Package URL

pkg:socket/skills-sh/dozaldevs%2Fdozaldevs-skills%2Fhire-ai-employee%2F@f51c57e056ad2590493cd6093052b5ff6e7408b292aed4c2237ec246f6b71dfe