skills/kostja94/marketing-skills/newsletter-signup-generator/Socket

newsletter-signup-generator

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly a redirect that instructs installation of another third-party skill, creating transitive trust in unreviewed remote instructions. The npm CLI path appears legitimate, but the external target is unpinned and not clearly verifiable, so the overall risk is medium rather than malicious.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Sep 25, 2026, 10:34 AM

Package URL

pkg:socket/skills-sh/kostja94%2Fmarketing-skills%2Fnewsletter-signup-generator%2F@414bc9dbfd59e95ccc6b93b0e79d999b46a07c6bfc3a60b30ae83712dbba6289