paylocity
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's business purpose is coherent, and the CLI comes from an official registry, but the actual data flow is through Membrane as an intermediary rather than directly to Paylocity. For a payroll/HR integration handling highly sensitive employee data, that third-party credential and data routing materially increases risk even without clear evidence of malware.
Confidence: 87%Severity: 68%
Audit Metadata