measure-results

Warn

Audited by Socket on Jul 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core local read/write-back behavior is coherent for a marketing measurement skill, but the optional hosted metrics mirror sends data through an unspecified external service using a hosted key, and the Bun-run local script is not independently verifiable from the provided text. This is not fundamentally incompatible with the stated purpose, but the undisclosed endpoint and transitive trust chain raise medium security concern.

Confidence: 80%Severity: 56%
Audit Metadata
Analyzed At
Jul 4, 2026, 10:17 PM
Package URL
pkg:socket/skills-sh/hungv47%2Fmeta-skills%2Fmeasure-results%2F@eae3d70ede42e9e7dbccaf8f60d80adb6c1c320d414d89913013793aeb09ffe6
Security Audit — socket — measure-results