voice-of-customer-synthesizer
Warn
Audited by Socket on Apr 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core VoC reporting purpose is coherent, but the skill expands scope by chaining unspecified third-party skills and ingesting untrusted external content without provenance or injection safeguards. Risk is driven more by transitive trust and external-content handling than by overt exfiltration or malicious behavior.
Confidence: 80%Severity: 62%
Audit Metadata