skills/infsh-skills/skills/customer-persona/Socket

customer-persona

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's persona-research and image-generation behavior mostly matches its stated purpose, but it relies on transitive skill installation, raw-GitHub install instructions, and an intermediary CLI that forwards prompts to external apps/providers. The main concern is install/data-flow trust rather than clear malicious intent.

Confidence: 82%Severity: 68%

Audit Metadata

Analyzed At

May 15, 2026, 07:16 PM

Package URL

pkg:socket/skills-sh/infsh-skills%2Fskills%2Fcustomer-persona%2F@05d049235ad6ae06d978e656a7e91fdc19b92b36