sales-specialist
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the business-card OCR, CRM write, research, and email drafting flow is broadly aligned with the stated purpose, and data mostly goes to expected destinations. The main security concern is transitive installation from an unpinned personal GitHub skill repo via the skills CLI, which materially increases supply-chain risk even though the operational behavior itself appears coherent.
Confidence: 87%Severity: 69%
Audit Metadata