univer-worklog-auto

Warn

Audited by Socket on May 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose broadly matches a worklog automation skill, but the actual execution trust cannot be fully assessed because core behavior is delegated to an unseen skill and hidden dependency bootstrap path. The largest concerns are opaque install steps and autonomous submission of worklog entries; data collection itself is proportionate to the claimed purpose.

Confidence: 77%Severity: 56%
Audit Metadata
Analyzed At
May 20, 2026, 01:00 PM
Package URL
pkg:socket/skills-sh/dream-num%2Fdogfooding%2Funiver-worklog-auto%2F@b79ab65faf9a3581797ba1a4c680eb59eba31100
Security Audit — socket — univer-worklog-auto