casualize-names
Audited by Socket on Mar 6, 2026
1 alert found:
Obfuscated FileThe package implements a benign, clearly stated transformation (casualizing names for email personalization) and relies on a third-party LLM (Anthropic) to perform the transformation. There are no signs of obfuscated or explicitly malicious code in the provided description. The main security concerns are privacy and operational: PII (names, emails, companies) is read from Google Sheets and sent to a third-party API without documented minimization, and Google authentication handling is unspecified. Before use, the project should document Google auth requirements, ensure minimal data is sent to Anthropic, add logging/retention guidance, and provide secure secret-management recommendations to reduce accidental data exposure.