roast-my-product
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main critique behavior is benign, but the skill includes telemetry that writes local state and posts metadata to a config-controlled remote endpoint. The biggest issue is that telemetry may start before explicit consent, and the network destination is not pinned to a verified official domain.
Confidence: 89%Severity: 56%
Audit Metadata