skills/gooseworks-ai/goose-skills/review-ugc-render/Socket

review-ugc-render

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core capability is well aligned with the stated QC purpose, and the local tooling footprint is proportionate. The main risk is data-flow integrity: honoring OPENAI_BASE_URL and naming an unverifiable Whisper proxy means audio and API credentials may be routed to a third-party endpoint instead of official OpenAI services.

Confidence: 89%Severity: 56%

Audit Metadata

Analyzed At

Jul 15, 2026, 09:43 AM

Package URL

pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Freview-ugc-render%2F@3ced9ed128e7df58aa9564f3bbbe87330e0c5b9b83431827657370ece5fdfd51