social-listening
Warn
Audited by Socket on Jul 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's purpose is plausible, and its credential scope is limited, but it reads a local credential file and routes all third-party monitoring traffic through Gooseworks' proxy instead of the official provider APIs. That proxy-centric data flow is the main risk and makes the skill moderately high-risk despite no strong evidence of outright malware.
Confidence: 88%Severity: 68%
Audit Metadata