run-ai-employee

Warn

Audited by Socket on Oct 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose and behavior are coherent for triggering vendor-hosted AI employees, and there is no direct exfiltration or deceptive behavior in this file. However, it depends on a non-publicly verifiable `dozaldevs` CLI and prior key setup from another skill, so execution trust is not established and the external binary must be treated as high supply-chain risk.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Oct 30, 2026, 04:59 PM
Package URL
pkg:socket/skills-sh/dozaldevs%2Fdozaldevs-skills%2Frun-ai-employee%2F@68868aa1c3c1c3f0d41c45b98aa9bdd578bc032588ecc5899ebe0f8901819700