cover-letter
Warn
Audited by Socket on Feb 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill presents a coherent, purpose-aligned design: it generates tailored cover letters from local data and optional fetched postings, saves outputs to a structured data directory, and provides iterative customization while preserving data. The external fetch step via a browser tool is the primary area needing user awareness and explicit consent due to potential data exposure, but it is not inherently malicious. Overall, the implementation appears BENIGN with MEDIUM security risk due to external tooling and data persistence across sessions; no malware indicators detected.
Confidence: 75%Severity: 75%
Audit Metadata