H-1B sponsor check skill

Security scan

AI scan High

VirusTotal scan Low

What looks risky

Privacy exfiltration 6.4

check.mjs

mentions sensitive credential material

Privacy exfiltration 6.4

install-h1b-index.mjs

mentions sensitive credential material

Privacy exfiltration 6.4

lib/api.mjs

mentions sensitive credential material

The same rule covers the certified count. A denial is USCIS's decision and a withdrawal is usually the candidate taking another offer or a cancelled req, so neither is evidence that an employer will not sponsor, and neither is something this plugin is equipped to judge. That is why the tier counts filings and `n_certified` is reported next to the filing count without being ranked, weighted, or read as a negative signal.