user-feedback-loop-automator

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's stated purpose is plausible, but it combines untrusted external content ingestion with implied write actions and automatic user notifications while omitting concrete API, approval, and data-flow details. No malicious exfiltration or supply-chain behavior is shown, but the autonomy and prompt-injection exposure make it medium risk.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Apr 18, 2026, 05:57 PM
Package URL
pkg:socket/skills-sh/adryanmoldokkr32-pixel%2Fbionicbot-advanced-mechanics-security%2Fuser-feedback-loop-automator%2F@ddbc3b8ee31ca62f80ffd33e2c4f7942cbcd5d1d
Security Audit — socket — user-feedback-loop-automator