skills/indranilbanerjee/digital-marketing-pro/connect/Socket

connect

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's purpose is coherent, but its trust boundary is too vague: it relies on an undisclosed local script, unnamed npx connector packages, and a fallback to custom/npm-discovered MCP servers. That makes install trust and credential forwarding hard to verify, especially for API keys supplied to third-party connector code.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

May 15, 2026, 01:59 PM

Package URL

pkg:socket/skills-sh/indranilbanerjee%2Fdigital-marketing-pro%2Fconnect%2F@35e4c0a7a1fbb382247ed27785fc6dd1047b290c