cfo-briefing

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The workflow is mostly aligned with its stated purpose, but it has a broad operational footprint: multiple opaque local scripts, runtime dependency resolution, sensitive HR/support data handling, and autonomous email sending. This looks like a legitimate internal automation skill with meaningful security risk rather than confirmed malware.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:17 AM
Package URL
pkg:socket/skills-sh/krishagel%2Fgeoffrey%2Fcfo-briefing%2F@6877e0325436ff579a638f23e1bc0a2c7e5b7daaef5e81975469315ed8e554ae
Security Audit — socket — cfo-briefing