measure-results
Warn
Audited by Socket on Jul 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core local read/write-back behavior is coherent for a marketing measurement skill, but the optional hosted metrics mirror sends data through an unspecified external service using a hosted key, and the Bun-run local script is not independently verifiable from the provided text. This is not fundamentally incompatible with the stated purpose, but the undisclosed endpoint and transitive trust chain raise medium security concern.
Confidence: 80%Severity: 56%
Audit Metadata