friction-log
Warn
Audited by Socket on Aug 23, 2026
1 alert found:
SecuritySecuritypassive/SKILL.md
MEDIUMSecurityMEDIUM
passive/SKILL.md
SUSPICIOUS: the skill’s core purpose is plausible, but it exports conversation-derived data to an unverifiable third-party Vercel endpoint and does so automatically at session end, with reduced transparency on failure. The capability is adjacent to the stated purpose, but the remote data flow and weak service provenance make the skill higher risk than a local-only friction reporter.
Confidence: 87%Severity: 74%
Audit Metadata