gtm-quickstart

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's core behavior is coherent and low-scope local analysis, but it includes a meaningful transitive trust risk by instructing installation of another skill from a personal repo when local audit data is absent. No direct exfiltration, credential harvesting, or malicious execution is present in this skill itself.

Confidence: 92%Severity: 58%
Audit Metadata
Analyzed At
Sep 18, 2026, 01:17 AM
Package URL
pkg:socket/skills-sh/aimonk2025%2Fgoogle-tag-manager-automation%2Fgtm-quickstart%2F@ec8fe82bca42790c3e3065bccbbec1f8a6d85193d0564b60a4be3d654acf6b8a