paylocity

Warn

Audited by Socket on Apr 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's business purpose is coherent, and the CLI comes from an official registry, but the actual data flow is through Membrane as an intermediary rather than directly to Paylocity. For a payroll/HR integration handling highly sensitive employee data, that third-party credential and data routing materially increases risk even without clear evidence of malware.

Confidence: 87%Severity: 68%
Audit Metadata
Analyzed At
Apr 29, 2026, 01:02 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fpaylocity%2F@5169121c62e742b1b261fe1931ec1f68596691a5
Security Audit — socket — paylocity