voice-of-customer-synthesizer

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core VoC reporting purpose is coherent, but the skill expands scope by chaining unspecified third-party skills and ingesting untrusted external content without provenance or injection safeguards. Risk is driven more by transitive trust and external-content handling than by overt exfiltration or malicious behavior.

Confidence: 80%Severity: 62%
Audit Metadata
Analyzed At
Apr 11, 2026, 03:56 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fvoice-of-customer-synthesizer%2F@320a3f4443e6533ac5d3f949cfdfd2751f5ce7c2