skills/har777/rolewire-skills/rolewire/Socket

rolewire

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core job-search purpose aligns with the HTTP endpoints and data flow to rolewire.app, but the optional MCP installation introduces medium supply-chain risk through unpinned auto-confirmed `npx` execution with unverified provenance. No clear credential harvesting or exfiltration is shown.

Confidence: 82%Severity: 57%

Audit Metadata

Analyzed At

Oct 17, 2026, 02:54 PM

Package URL

pkg:socket/skills-sh/har777%2Frolewire-skills%2Frolewire%2F@ce8c4ff74300547c26e3878edee6ab04cdfdee215d8c9b1325c975c3d6ef4fd0