post-to-campaign

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capabilities mostly match the stated purpose, and the skill limits itself to drafting rather than launching campaigns. However, trust is weakened by a transitive skill-install suggestion and a mismatch between the MCP install domain in the skill evidence and LGM's officially documented MCP URL. Combined with same-org but unpinned curl|sh-style install paths, this is better classified as medium risk rather than benign.

Confidence: 82%Severity: 57%
Audit Metadata
Analyzed At
Jul 16, 2026, 03:13 PM
Package URL
pkg:socket/skills-sh/LaGrowthMachine%2Fgtm-system%2Fpost-to-campaign%2F@7c2a7b43a0e3281b951124df31d486755b47c269f240cb1996b59473db743561
Security Audit — socket — post-to-campaign