website-health-analytics

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill's real footprint depends on installing two external companion skills that handle GA4/GSC collection outside this artifact. That transitive trust chain, combined with cross-source auth/analytics/code correlation and local identity mappings, makes this higher-risk than a normal documentation/orchestration skill even without clear evidence of malware.

Confidence: 82%Severity: 76%
Audit Metadata
Analyzed At
Jul 18, 2026, 02:56 AM
Package URL
pkg:socket/skills-sh/ajelinek%2Fskills-stash%2Fwebsite-health-analytics%2F@19ea79dbb98419d7347d594eeea84ad0d2dac351d8c85e0a0892b384df76ca8e
Security Audit — socket — website-health-analytics