Caveat verdict
Analyze Customer Sentiment & Intent with AI Classification
audience-sentiment-intent-analyzer
Analyzes social media comments and DMs using platform APIs with user-provided API keys; all credential and network activity is for the stated sentiment analysis purpose against the user own accounts.
โ Flagged for review โ coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis โ not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (2)
Possible hardcoded credential
SKILL.md ยท code ยท API_KEY="your-youtube-api-key
References webhook/callback URL
SKILL.md ยท code ยท WEBHOOK_URL
Permissions & capabilities
Requires 4 environment variables. (3 sensitive: YOUTUBE_API_KEY, TIKTOK_API_KEY, ANTHROPIC_API_KEY). Requires 2 system binaries.
network_incredential_access Is this flag fair?
Thanks โ recorded.