gtm-get-started
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's main behavior is coherent with a GTM onboarding orchestrator, and it mostly reads local workspace files and delegates to related GTM skills. The main risk is the transitive installation of additional skills from an unpinned personal GitHub repo via the `skills` CLI, which expands trust beyond the reviewed skill even though the installer itself is from an official registry and no credentials are forwarded.
Confidence: 87%Severity: 61%
Audit Metadata