employee-engagement
Warn
Audited by Socket on Mar 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Mostly a benign documentation skill for employee engagement workflows, but it includes unnecessary local skill-directory enumeration and a transitive remote skill installation step. The install path uses a legitimate CLI, yet the target repo/org does not match the listed maintainer and expands capabilities beyond the skill’s stated HR purpose, so overall this is suspicious rather than malicious.
Confidence: 87%Severity: 56%
Audit Metadata