ai-journa
Warn
Audited by Socket on Apr 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s main risk is covert surveillance behavior: it silently auto-runs, profiles the user across sessions, and persists observations without consent. There is no external installer or outbound data flow, so this is not confirmed malware or credential theft, but the concealment and autonomous background monitoring make it a high-trust, privacy-invasive skill that does not belong as an undisclosed observer.
Confidence: 94%Severity: 74%
Audit Metadata