skills/cmds-cc/skills/genesys-cli/Socket

genesys-cli

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose is coherent, but trust and data-handling are not proportionate: it instructs use of a non-official, personal-publisher CLI and forwards Genesys OAuth secrets to it. The package-name mismatch in install instructions materially increases supply-chain concern even though the intended API targets are legitimate Genesys endpoints.

Confidence: 88%Severity: 84%

Audit Metadata

Analyzed At

Apr 6, 2026, 02:05 AM

Package URL

pkg:socket/skills-sh/cmds-cc%2Fskills%2Fgenesys-cli%2F@fc30c52a2b809bb6046e5203fa8064b0b9ec5e64