marketingskills-ai-agent-collection
Warn
Audited by Socket on May 19, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent for a marketing skill collection, and most examples are normal documentation, but the skill's primary action is transitive installation of a third-party skill repo. Provenance is somewhat unclear (`ara.so` branding vs personal GitHub repo), and the CLI install command shown is inconsistent with official docs, so trust in the install path is reduced even without clear exfiltration or confirmed malicious behavior.
Confidence: 87%Severity: 72%
Audit Metadata