run-ai-employee
Warn
Audited by Socket on Oct 30, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose and behavior are coherent for triggering vendor-hosted AI employees, and there is no direct exfiltration or deceptive behavior in this file. However, it depends on a non-publicly verifiable `dozaldevs` CLI and prior key setup from another skill, so execution trust is not established and the external binary must be treated as high supply-chain risk.
Confidence: 84%Severity: 72%
Audit Metadata