employee-engagement

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly a benign documentation skill for employee engagement workflows, but it includes unnecessary local skill-directory enumeration and a transitive remote skill installation step. The install path uses a legitimate CLI, yet the target repo/org does not match the listed maintainer and expands capabilities beyond the skill’s stated HR purpose, so overall this is suspicious rather than malicious.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Mar 23, 2026, 01:04 PM
Package URL
pkg:socket/skills-sh/AbsolutelySkilled%2FAbsolutelySkilled%2Femployee-engagement%2F@7eafce1965bb2414c20c0682ac01cc824f48622b
Security Audit — socket — employee-engagement