national-pension-workplace

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is narrow, but its actual behavior is largely delegated to remote same-publisher content and a proxy service, reducing reviewability and routing data away from the official API path. The install source appears publisher-consistent rather than random, so this is not confirmed malware, but the remote-instruction and proxy design create medium security risk.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Sep 17, 2026, 07:51 AM
Package URL
pkg:socket/skills-sh/nomadamas%2Fk-skill%2Fnational-pension-workplace%2F@f88245b31226ba8e756120e0154569cf699bf2952c41c0975f6184b4a3408b8a