investor-call-prep

Warn

Audited by Socket on May 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The overall purpose is plausible, but the implementation is over-centralized through Gooseworks proxy endpoints that receive calendar data, company details, and research queries instead of using official APIs directly. The direct credential-file read, credential forwarding to a gateway, and automatic Google Sheets export make the skill's data flow broader and riskier than its stated investor-prep purpose.

Confidence: 89%Severity: 83%
Audit Metadata
Analyzed At
May 5, 2026, 12:14 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Finvestor-call-prep%2F@0a42cb36cee9103efd6fb6ea8fce4bdfa75be998