sap-successfactors
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's purpose and capabilities mostly align, and the CLI comes from an official npm package tied to the same Membrane ecosystem. However, all SAP SuccessFactors access and auth are funneled through Membrane as a third-party intermediary, local token storage is involved, and installs are unpinned, so the trust and data-flow footprint is broader than a direct SAP integration.
Confidence: 86%Severity: 56%
Audit Metadata