voice-of-customer-synthesizer
Warn
Audited by Socket on Mar 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose is coherent, but the skill expands scope by chaining an unreviewed `review-scraper` and suggesting generic social scraping tools instead of official APIs. The main risks are transitive trust, unverifiable dependency provenance, and ingestion of untrusted public content; there is no clear evidence of deliberate credential theft or overt exfiltration in the skill text itself.
Confidence: 82%Severity: 63%
Audit Metadata