competitor-research

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose is plausible, but it reads a local Gooseworks credential file and routes all provider calls through Gooseworks proxy endpoints instead of official APIs. That intermediary data flow and credential handling are coherent with a hosted platform model, yet still create material trust and privacy risk beyond a narrowly scoped competitor-research skill.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Jul 2, 2026, 06:17 AM
Package URL
pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fcompetitor-research%2F@40d2bae2199123d682de214f0555019d77a1a59c25a74242a2244453824310a0
Security Audit — socket — competitor-research