recoup-internal-consulting-nightly-ingestion

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's capabilities broadly fit an internal consulting automation workflow, and the stated rails reduce some harm, but the unattended autopilot design, broad token scope, and authority to update many systems and commit changes make it high risk. No clear malware or credential-harvesting endpoint is shown, yet the operational footprint is large enough that compromise or prompt-manipulated inputs could cause significant business-side effects.

Confidence: 84%Severity: 79%
Audit Metadata
Analyzed At
Sep 18, 2026, 05:10 PM
Package URL
pkg:socket/skills-sh/recoupable%2Fskills%2Frecoup-internal-consulting-nightly-ingestion%2F@b7c1a804635427bd5cc755604c41a6d6035f7f1d6d6880133abcf5c729f6e2ef