cfo-briefing
Warn
Audited by Socket on Sep 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The workflow is mostly aligned with its stated purpose, but it has a broad operational footprint: multiple opaque local scripts, runtime dependency resolution, sensitive HR/support data handling, and autonomous email sending. This looks like a legitimate internal automation skill with meaningful security risk rather than confirmed malware.
Confidence: 85%Severity: 72%
Audit Metadata