cmo

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the marketing purpose broadly matches the capabilities, but the footprint is unusually expansive for one skill. The main concerns are transitive skill installation, reliance on an unverified custom CLI/toolchain in the provided text, and the ability to take real-world publishing actions after ingesting untrusted external content.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 14, 2026, 02:08 PM
Package URL
pkg:socket/skills-sh/MoizIbnYousaf%2Fmarketing-cli%2Fcmo%2F@4338f05085ef943541df63dd57f5efa4d5e440369bc28d5641de4d4490d128b4
Security Audit — socket — cmo