upsell-script

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core copywriting purpose is mostly coherent, but the skill exceeds a simple writing role by executing local binaries, modifying persistent state, invoking analytics, and opening promotional content. The main concern is opaque telemetry/update tooling and a minor mismatch between the stated privacy claim and unverifiable binary behavior, not confirmed malware.

Confidence: 79%Severity: 52%
Audit Metadata
Analyzed At
Aug 11, 2026, 01:40 PM
Package URL
pkg:socket/skills-sh/coleschaffer%2Fdtc-copywriting-skills%2Fupsell-script%2F@8477bfbcb6a6723ee56a28ec990daf5a826cf7c5b5ae7a4e0590143ae1f1bec9
Security Audit — socket — upsell-script