sesion-clinic-workflow

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The functional capabilities mostly match the stated clinic-platform purpose, and external data flows go to plausible official services. The main issue is install trust: the skill is published as ara.so but instructs cloning and executing a different personal GitHub repository, creating a notable provenance gap for a high-sensitivity healthcare workflow with many secrets and patient-data flows.

Confidence: 89%Severity: 66%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:47 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fsesion-clinic-workflow%2F@6a78e8ac88e514180c3bf2d04e57e69f183973c61c63b7ddfc3d4c293496e290