resume-writer

Warn

Audited by Socket on Jul 13, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/Register-ResumeTipsRefreshTask.ps1

This module is primarily an installer/orchestrator for persistence: it registers a weekly Task Scheduler job that executes a specific local PowerShell script. The main security weaknesses are the explicit '-ExecutionPolicy Bypass' and the absence of integrity/trust validation for the resolved script path/content. While this fragment alone shows no malicious payload behavior, it materially increases risk if the referenced script or SkillRoot location is tampered with.

Confidence: 61%Severity: 56%
Audit Metadata
Analyzed At
Jul 13, 2026, 01:08 AM
Package URL
pkg:socket/skills-sh/mickpletcher%2FAI-Skills%2Fresume-writer%2F@e7e1cb390230d1c8c84d76aedc4f7235a543c3b7a72d5bef835fae28b3867bd0
Security Audit — socket — resume-writer