jobvite

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated Jobvite purpose is plausible, and the CLI source appears first-party via npm, but the actual data path is a Membrane-managed intermediary rather than direct Jobvite API access. That third-party credential and data routing is the main concern; this looks more like a vendor gateway skill than a narrowly scoped Jobvite integration.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Apr 22, 2026, 02:56 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fjobvite%2F@8f2621a3054ecfde283e892767d2172a292f7d9a