voice-of-customer-synthesizer

Warn

Audited by Socket on Mar 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent, but the skill expands scope by chaining an unreviewed `review-scraper` and suggesting generic social scraping tools instead of official APIs. The main risks are transitive trust, unverifiable dependency provenance, and ingestion of untrusted public content; there is no clear evidence of deliberate credential theft or overt exfiltration in the skill text itself.

Confidence: 82%Severity: 63%
Audit Metadata
Analyzed At
Mar 28, 2026, 11:43 AM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fvoice-of-customer-synthesizer%2F@e0639d0052de7ac84cdc5f39b5b93ccd392387bc