cv-generator

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is broadly aligned with resume creation, and official Cloudflare/CDN usage looks legitimate. Risk comes from extensive third-party data handling, optional forwarding of a personal photo to an insufficiently specified image CLI/service, ingestion of untrusted web content, and automatic public deployment of personal information. Main concern is privacy and agent-action scope rather than confirmed malware.

Confidence: 82%Severity: 59%
Audit Metadata
Analyzed At
Mar 25, 2026, 09:02 PM
Package URL
pkg:socket/skills-sh/AAlvAAro%2Fskills%2Fcv-generator%2F@59c0f0c180ade0a9e3d3f5c8529cba6a0679546d