social-listening

Warn

Audited by Socket on Aug 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated social-listening purpose is coherent, but the implementation is not fully proportionate: it reads a local credential file and routes provider traffic through Gooseworks proxy endpoints rather than official APIs. The Gooseworks installer path appears same-org and official, so this is not confirmed malware, but the credential handling and intermediary data flow materially increase risk.

Confidence: 85%Severity: 76%
Audit Metadata
Analyzed At
Aug 21, 2026, 10:51 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fsocial-listening%2F@c2b6c109875b9fdda940a0a52538feeff3fb0815f60ca87ce7fc309d8504a65d
Security Audit — socket — social-listening