worklog
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The worklog skill is internally consistent with its described purpose: it tracks billable hours, validates against the invoice skill's client list, reads client data, stores entries locally, and uses invoice data to compute billable amounts when generating reports. There are no evident credential or remote data-exfiltration concerns, and the install/execution model relies on local scripts and existing data files. Overall, the footprint is benign and proportionate to its stated goal, with transparent data flows and safe read/write patterns.
Confidence: 98%
Audit Metadata