voice-of-customer-synthesizer
Warn
Audited by Socket on Jun 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core skill purpose is coherent and mostly local, but optional review scraping introduces a notable trust gap because APIFY_API_TOKEN may be handed to unspecified third-party Apify actors. Optional external vector DB use also expands data exposure for potentially sensitive customer feedback. This is not confirmed malware, but it carries medium security risk from third-party credential forwarding and external data flows.
Confidence: 84%Severity: 62%
Audit Metadata