dot-sdk-analytics
Warn
Audited by Socket on Sep 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s overall purpose and capabilities are mostly coherent for a dotCMS analytics setup guide, and the npm install path appears official and proportionate. However, the instruction to set NODE_TLS_REJECT_UNAUTHORIZED=0 is a serious security issue that disables TLS verification and makes the guide unsafe despite otherwise benign intent.
Confidence: 93%Severity: 74%
Audit Metadata