voice-of-customer-synthesizer

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core skill purpose is coherent and mostly local, but optional review scraping introduces a notable trust gap because APIFY_API_TOKEN may be handed to unspecified third-party Apify actors. Optional external vector DB use also expands data exposure for potentially sensitive customer feedback. This is not confirmed malware, but it carries medium security risk from third-party credential forwarding and external data flows.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Jun 24, 2026, 10:23 AM
Package URL
pkg:socket/skills-sh/robomotionio%2Frobomotion-skills%2Fvoice-of-customer-synthesizer%2F@e63f96351061fe6151987c7c85ab8776e30d8b5993d69771f47f6ab4c1c7969f
Security Audit — socket — voice-of-customer-synthesizer