gtm-quickstart
Warn
Audited by Socket on Sep 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's core behavior is coherent and low-scope local analysis, but it includes a meaningful transitive trust risk by instructing installation of another skill from a personal repo when local audit data is absent. No direct exfiltration, credential harvesting, or malicious execution is present in this skill itself.
Confidence: 92%Severity: 58%
Audit Metadata