workflow-business-evaluation

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is coherent, but the skill offloads all execution to undocumented internal workflow commands and combines untrusted web research with sequential automated analysis steps. There is no clear credential theft or malicious exfiltration, yet the opaque command surface and prompt-injection exposure make it medium risk.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Apr 10, 2026, 07:28 AM
Package URL
pkg:socket/skills-sh/duc01226%2Feasyplatform%2Fworkflow-business-evaluation%2F@b3038b56d2330645de263b0ed0fab9de64d608f4