run-campaign
Warn
Audited by Socket on May 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent for a marketing-automation meta-skill, and the approval gates are a meaningful safeguard. The main risk is transitive trust: this wrapper routes sensitive accounting/CRM data and real-world actions through three external skills whose implementations are not provided, while Bash/WebFetch access broadens what they could do.
Confidence: 83%Severity: 61%
Audit Metadata