job-search

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's overall purpose matches job search and company research, but it reads a local credential file and sends all activity through Gooseworks proxy endpoints instead of official vendor APIs. That proxy-centric data flow and credential forwarding are broader than necessary for a simple job-search skill, though there is no confirmed malware or hidden execution.

Confidence: 90%Severity: 58%
Audit Metadata
Analyzed At
Oct 12, 2026, 02:17 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fjob-search%2F@77f366ef2a5f332e6f6c67ecf4adfb04410303382dd6852d7ca7f5a1931b91b0