jobvite
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated Jobvite purpose is plausible, and the CLI source appears first-party via npm, but the actual data path is a Membrane-managed intermediary rather than direct Jobvite API access. That third-party credential and data routing is the main concern; this looks more like a vendor gateway skill than a narrowly scoped Jobvite integration.
Confidence: 84%Severity: 68%
Audit Metadata