teamtailor

Warn

Audited by Socket on May 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent as a Teamtailor integration, but it routes authentication and API activity through Membrane as an intermediary and uses an unpinned external CLI. This is not strong evidence of malware, yet it carries medium security risk because Teamtailor data and auth are brokered by a third party rather than handled directly with official Teamtailor APIs.

Confidence: 86%Severity: 54%
Audit Metadata
Analyzed At
May 8, 2026, 12:50 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fteamtailor%2F@2c9d53f0246845414f429c63271571107cd346a8
Security Audit — socket — teamtailor