business-growth-skills

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated business-analysis purpose is coherent and the local stdlib-only Python tooling appears proportionate, but the install path introduces a medium trust risk: a third-party CLI installs skill content from a personal GitHub repository, creating a transitive trust chain without strong provenance guarantees. No direct credential theft, exfiltration, or malware behavior is evident in the provided snippet.

Confidence: 88%Severity: 57%
Audit Metadata
Analyzed At
Sep 3, 2026, 02:34 PM
Package URL
pkg:socket/skills-sh/afaizalam2003%2Fmaster-claude-skill%2Fbusiness-growth-skills%2F@6a0328015625e8f7941372b5928bd25f634d578fd148d2841cc3334b9fbb4a06
Security Audit — socket — business-growth-skills