post-purchase-sequence

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core copywriting behavior is coherent, but the skill is not purely a writing guide: it executes local helper tools, writes local state, enables default telemetry, and encourages additional skill invocations. Nothing here is confirmed malware, yet the analytics/helper-tool data flow and expanded trust footprint are broader than necessary for a post-purchase email generator.

Confidence: 81%Severity: 61%
Audit Metadata
Analyzed At
Aug 11, 2026, 01:38 PM
Package URL
pkg:socket/skills-sh/coleschaffer%2Fdtc-copywriting-skills%2Fpost-purchase-sequence%2F@1612a1e6be95bfd22766a5f2fc7677102ee494762faf9c47ce42982987498241
Security Audit — socket — post-purchase-sequence