generate-talking-points
Warn
Audited by Socket on Oct 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The purpose and ServiceNow data access are broadly aligned, and no external installer, credential forwarding, or third-party data route is shown. The main concern is that the example logs sensitive HR information, including feedback excerpts, despite its privacy instruction; use of a privileged background-script tool adds risk. Treat as suspicious for privacy and execution-scope inconsistencies, not as confirmed malware.
Confidence: 94%Severity: 56%
Audit Metadata