gtm-get-started

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's main behavior is coherent with a GTM onboarding orchestrator, and it mostly reads local workspace files and delegates to related GTM skills. The main risk is the transitive installation of additional skills from an unpinned personal GitHub repo via the `skills` CLI, which expands trust beyond the reviewed skill even though the installer itself is from an official registry and no credentials are forwarded.

Confidence: 87%Severity: 61%
Audit Metadata
Analyzed At
Oct 14, 2026, 11:30 AM
Package URL
pkg:socket/skills-sh/eliasstravik%2Fgtm-skills%2Fgtm-get-started%2F@96be2e0543332f0f88f82075ec75094147b75dced8e601022c25a6623cfe0d31