ai-journa

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s main risk is covert surveillance behavior: it silently auto-runs, profiles the user across sessions, and persists observations without consent. There is no external installer or outbound data flow, so this is not confirmed malware or credential theft, but the concealment and autonomous background monitoring make it a high-trust, privacy-invasive skill that does not belong as an undisclosed observer.

Confidence: 94%Severity: 74%
Audit Metadata
Analyzed At
Apr 20, 2026, 05:06 PM
Package URL
pkg:socket/skills-sh/zvadaadam%2Faz-skills%2Fai-journa%2F@5277bb42474ad5af5aba1a96512ce63f9fdf5b1f