gtm-workflow-enrich-network

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main risk is transitive trust: this skill tells the agent to install additional skills, which inherit agent permissions and shift core execution to external instructions. Aside from that, the capability and provider data flows are largely consistent with the stated network-enrichment purpose, and the installer path appears to be the official Skills CLI rather than an obviously rogue payload.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 08:34 PM
Package URL
pkg:socket/skills-sh/eliasstravik%2Fgtm-skills%2Fgtm-workflow-enrich-network%2F@8df374e06b170901fd86ccd0bdeed069f049d548e9d3b801200a281386669480
Security Audit — socket — gtm-workflow-enrich-network