openai-ads

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's ad-management capabilities are largely aligned with its stated purpose, but its credential and data flow are not purely first-party. Requiring users to connect an OpenAI Ads API key through Hyper MCP introduces a meaningful third-party trust boundary for sensitive advertising credentials and account operations. No direct malware indicators or hidden execution appear in the skill text, but the intermediary architecture makes it higher risk than a direct official API integration.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 17, 2026, 07:38 AM
Package URL
pkg:socket/skills-sh/hyperfx-ai%2Fmarketing-skills%2Fopenai-ads%2F@38c40c2d38d40c219eaaa2bbf901857f7f594060690ed88f9a1e20d8098cadf1
Security Audit — socket — openai-ads