cv-customizer

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core CV-processing and Google Docs output are aligned with the stated purpose, but the skill's biggest risk is the transitive installation of another skill from a personal GitHub repository without strong provenance signals such as signed releases or checksums. Data flows are otherwise proportionate to a CV-customization workflow, and the autonomy-abuse flag looks like a likely false positive.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 10, 2026, 07:33 PM
Package URL
pkg:socket/skills-sh/peter-tu-zynkr%2Fzynkr-skill-builder%2Fcv-customizer%2F@ef4808281533f307a4f80520fdb7674d8d738dc6d4e5fd0780ac7b3c1a856631
Security Audit — socket — cv-customizer