customer-discovery

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core capability matches the stated purpose of customer research, and most data flows are proportionate. Risk comes from optional transitive companion skills and credential forwarding to locally referenced scripts with unclear provenance, plus broad ingestion of untrusted web content; this is not clearly malicious, but it exceeds a fully low-risk documentation/research skill.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 28, 2026, 01:06 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fcustomer-discovery%2F@d716c6121cf768a56ad95ab8f03a57164ecae7d4