market-research
Warn
Audited by Socket on Jul 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s research behavior mostly matches its stated purpose, but it reads a local credential file and forwards both token-authenticated requests and research data through Gooseworks proxy endpoints instead of direct official vendor APIs. This is a coherent SaaS integration, yet the intermediary data flow and raw credential handling make the skill medium risk.
Confidence: 88%Severity: 68%
Audit Metadata