campaign-impact-analyzer

Warn

Audited by Socket on May 27, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core capability is mostly aligned with campaign attribution analysis, and data flows appear proportionate to LGM+HubSpot use. The main concerns are the unverifiable/possibly inconsistent LGM MCP install claim and the transitive trust introduced by chaining into sibling skills; these make the skill medium risk rather than benign.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
May 27, 2026, 02:56 PM
Package URL
pkg:socket/skills-sh/lagrowthmachine%2Fgtm-system%2Fcampaign-impact-analyzer%2F@683aa834e8e87a33ff1b6b5c4cceeab533caffef
Security Audit — socket — campaign-impact-analyzer