uservoice
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's purpose broadly matches UserVoice automation, and the CLI source appears to be the publisher's official npm package. However, all authentication and API access are routed through Membrane rather than directly to official UserVoice endpoints, creating third-party credential/data mediation that is disproportionate for a plain UserVoice skill and raises trust and data-flow concerns.
Confidence: 84%Severity: 64%
Audit Metadata