Skills
skills/minhnv0807/fullstack-mkt-skills/08-nghien-cuu-doi-thu/Socket

08-nghien-cuu-doi-thu

Warn

Audited by Socket on May 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. Phan noi dung phan tich doi thu ban than la hop ly, va Meta Official MCP co ve la nguon chinh thuc. Tuy nhien skill khong gioi han ro rang vao MCP chinh thuc ma con khuyen khich `facebook-ads-library-mcp` khong duoc xac minh la Meta-owned, co dau hieu la package npm cong dong va co the nhan token/API keys. Day tao rui ro supply-chain va credential-forwarding khong tuong xung voi mot skill nghien cuu chien luoc.

Confidence: 89%Severity: 82%
Audit Metadata
Analyzed At
May 9, 2026, 09:29 AM
Package URL
pkg:socket/skills-sh/minhnv0807%2Ffullstack-mkt-skills%2F08-nghien-cuu-doi-thu%2F@90265c7dde3f52a5ded39eaf5d296c9a7ecd83a8
Security Audit — socket — 08-nghien-cuu-doi-thu