post-to-campaign
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capabilities mostly match the stated purpose, and the skill limits itself to drafting rather than launching campaigns. However, trust is weakened by a transitive skill-install suggestion and a mismatch between the MCP install domain in the skill evidence and LGM's officially documented MCP URL. Combined with same-org but unpinned curl|sh-style install paths, this is better classified as medium risk rather than benign.
Confidence: 82%Severity: 57%
Audit Metadata