viboscope
Warn
Audited by Socket on Sep 2, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core matchmaking purpose is coherent with collecting questionnaire data and using a hosted API, but the skill has medium risk due to a mutable direct-download installer, unclear publisher/repo relationship, and vague workspace-scanning data flows. There is no clear evidence of outright malware or credential theft, but the install trust and privacy scope are not strong enough to treat as benign.
Confidence: 82%Severity: 61%
Audit Metadata