sage-hr

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is internally coherent for an Apideck connector guide, with no malware-like installer or hidden execution. However, it explicitly routes sensitive HR data and Sage HR credentials through Apideck Vault/Proxy as an intermediary, which is a meaningful third-party data-flow and credential-forwarding risk even if consistent with the product's stated purpose.

Confidence: 92%Severity: 56%
Audit Metadata
Analyzed At
Oct 4, 2026, 11:56 AM
Package URL
pkg:socket/skills-sh/apideck-libraries%2Fapi-skills%2Fsage-hr%2F@23c4c05442c2415f36a16cc66e86f873d6ecf292d095c21728a29458db56633b