documenso-core-workflow-a

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Documenso core workflow is coherent with its stated purpose: it creates documents from PDFs, registers recipients with signing order, places fields, optionally sends for signing, and retrieves signing URLs via the Documenso SDK. Data flows align with typical SDK usage, and credentials are confined to a reasonably scoped environment variable. There are minor concerns around error handling and memory usage for large PDFs, but no evident credential leakage, unauthorized data routing, or supply-chain red flags. Overall, the skill footprint is benign and proportionate to its documented function.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 01:49 AM
Package URL
pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fdocumenso-core-workflow-a%2F@318db5057878b2601f656cf615a408686614531d