Skills
skills/membranedev/application-skills/workday/Socket

workday

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: internally coherent for a Membrane-published Workday skill, but it materially expands trust to a third-party platform and CLI that mediate authentication and all Workday data access. This is not overtly malicious, yet the data flow is more sensitive than a direct official Workday integration and warrants medium risk.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 28, 2026, 11:43 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fworkday%2F@b8e0bdb226871e23310be888a539e33c913837e2