marketingskills-ai-agent-collection

Warn

Audited by Socket on May 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent for a marketing skill collection, and most examples are normal documentation, but the skill's primary action is transitive installation of a third-party skill repo. Provenance is somewhat unclear (`ara.so` branding vs personal GitHub repo), and the CLI install command shown is inconsistent with official docs, so trust in the install path is reduced even without clear exfiltration or confirmed malicious behavior.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
May 19, 2026, 04:41 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fmarketing-skills%2Fmarketingskills-ai-agent-collection%2F@e1cac0f10456fd678d826a8cdc2b74e1c210a44e
Security Audit — socket — marketingskills-ai-agent-collection