social-listening
Warn
Audited by Socket on Aug 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated social-listening purpose is coherent, but the implementation is not fully proportionate: it reads a local credential file and routes provider traffic through Gooseworks proxy endpoints rather than official APIs. The Gooseworks installer path appears same-org and official, so this is not confirmed malware, but the credential handling and intermediary data flow materially increase risk.
Confidence: 85%Severity: 76%
Audit Metadata