marketing-studio-agent

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches marketing/video generation, but the trust model is weaker than expected: the skill directs users to clone and execute a separate repo from a different publisher identity, then install additional skills into Claude Code. Credential scope is mostly proportionate, and there is no clear evidence of exfiltration or malware, but provenance and transitive installation concerns make this medium-to-high risk.

Confidence: 82%Severity: 72%
Audit Metadata
Analyzed At
Jul 10, 2026, 04:21 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fmarketing-skills%2Fmarketing-studio-agent%2F@94ebcbc660649c8bcf93bcbd9f30f78a6a476747fe0da422f6fc64f36f979465
Security Audit — socket — marketing-studio-agent