jobvite

Warn

Audited by Socket on May 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated Jobvite purpose is plausible, and the CLI source appears first-party via npm, but the actual data path is a Membrane-managed intermediary rather than direct Jobvite API access. That third-party credential and data routing is the main concern; this looks more like a vendor gateway skill than a narrowly scoped Jobvite integration.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
May 1, 2026, 12:39 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fjobvite%2F@91891a088d3b611eb436c9ced798aa11489dc1f4
Security Audit — socket — jobvite