Skip to main content

feedback-form

Generates an in-app feedback collection form with smart routing for user feedback, bug reports, and feature requests.

Install this skill

or
66/100

Security score

The feedback-form skill was audited on Mar 1, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 45

Webhook reference - potential data exfiltration

SourceSKILL.md
45Note: MessageUI is iOS-only. macOS uses `NSSharingService` or direct webhook delivery.
medium line 61

Webhook reference - potential data exfiltration

SourceSKILL.md
61- Webhook (POST to a URL endpoint)
medium line 91

Webhook reference - potential data exfiltration

SourceSKILL.md
915. `FeedbackSubmitter.swift` — Protocol + EmailFeedbackSubmitter + WebhookFeedbackSubmitter
low line 114

Webhook reference - potential data exfiltration

SourceSKILL.md
114├── FeedbackSubmitter.swift # Email + webhook delivery
low line 175

Webhook reference - potential data exfiltration

SourceSKILL.md
175func webhookSubmitterSendsCorrectPayload() async throws {
low line 177

Webhook reference - potential data exfiltration

SourceSKILL.md
177let submitter = WebhookFeedbackSubmitter(
medium line 258

Webhook reference - potential data exfiltration

SourceSKILL.md
258- **MFMailComposeViewController requires a mail account**: Check `MFMailComposeViewController.canSendMail()` before presenting. Fall back to webhook or `mailto:` URL if unavailable.
medium line 260

Webhook reference - potential data exfiltration

SourceSKILL.md
260- **Attachment size limits for email**: Email attachments are typically limited to 10-25 MB. Compress screenshots to JPEG and resize if needed. Webhook delivery is more reliable for large attachments.
medium line 263

Webhook reference - potential data exfiltration

SourceSKILL.md
263- **macOS has no MFMailComposeViewController**: Use `NSSharingService(named: .composeEmail)` or prefer webhook delivery on macOS.
low line 178

External URL reference

SourceSKILL.md
178url: URL(string: "https://example.com/feedback")!,
Scanned on Mar 1, 2026
View Security Dashboard
Installation guide →