sales-operations-setup

Warn

Audited by Socket on Feb 16, 2026

1 alert found:

Security
SecurityMEDIUM
package.json

The package executes a bundled install.js (twice, via install and postinstall). This is a common pattern for legitimate setup tasks, but executing arbitrary code at install time is a risky operation and could be used for malicious purposes (data exfiltration, telemetry, running untrusted code, modifying the system, adding hooks, etc.). Without inspecting the contents of install.js (and any scripts it calls, such as install.sh), it is not possible to rule out malicious behavior. Review the install.js and related files before installing in sensitive environments.

Confidence: 75%Severity: 70%
Audit Metadata
Analyzed At
Feb 16, 2026, 02:25 AM
Package URL
pkg:socket/skills-sh/thierryteisseire%2Fbusiness_skills%2Fsales-operations-setup%2F@af9ac1a9056112ddb5df2e78980e4aa99a5eb127