cv-customizer
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core CV-processing and Google Docs output are aligned with the stated purpose, but the skill's biggest risk is the transitive installation of another skill from a personal GitHub repository without strong provenance signals such as signed releases or checksums. Data flows are otherwise proportionate to a CV-customization workflow, and the autonomy-abuse flag looks like a likely false positive.
Confidence: 88%Severity: 74%
Audit Metadata