skills/maneeshanif/ai-employee-hackathon-spec-driven/watcher-management/Socket

watcher-management

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s core behavior is mostly coherent with watcher management, and PM2 usage is from a legitimate source, but it normalizes persistent background monitoring of sensitive channels (Gmail, WhatsApp, finance) without showing credential handling or exact network endpoints. Risk is driven more by under-specified sensitive data flows and persistence than by confirmed malicious behavior.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Apr 9, 2026, 10:43 PM

Package URL

pkg:socket/skills-sh/maneeshanif%2FAI-Employee-Hackathon-spec-driven%2Fwatcher-management%2F@1978ad6196eee1cb572a65f79aeedbd5477752bd