landscape-scan

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent with reading brand files, doing live market research, asking the user questions, and writing landscape.md. The main concerns are transitive trust in the unspecified /last30days skill and prompt-injection risk from processing large volumes of untrusted web content while retaining file-write capability. No clear credential harvesting, malicious installer, or overt exfiltration behavior is present in the supplied skill text.

Confidence: 83%Severity: 56%
Audit Metadata
Analyzed At
Jul 14, 2026, 02:08 PM
Package URL
pkg:socket/skills-sh/MoizIbnYousaf%2Fmarketing-cli%2Flandscape-scan%2F@138917b7a2cd8a6e183c575b5c6c96d1622139b31edbce81724570ed79e621d3
Security Audit — socket — landscape-scan