persona-sim

Warn

Audited by Socket on Jun 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core capability is coherent with persona simulation, and installation is relatively standard, but the skill intentionally supports custom LLM gateways and third-party OpenAI-compatible endpoints that can receive prompts and API keys instead of official provider APIs. This is not fundamentally incompatible with the stated purpose, but it creates medium data-flow and credential-routing risk that should be treated cautiously.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Jun 27, 2026, 07:10 AM
Package URL
pkg:socket/skills-sh/yrzhe%2Fclaude-skills%2Fpersona-sim%2F@8bb2d3b88a1a47ce2a439b007cb3dd7dfda693440b1323fab3466745bdbf0db1
Security Audit — socket — persona-sim