gohighlevel

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated CRM purpose matches its capabilities, and its mutation safeguards are reasonable, but it routes sensitive CRM access and credentials through a third-party NotFair MCP service rather than direct official GoHighLevel APIs. That makes the main issue data-flow integrity and third-party credential trust, not overt malware or deceptive installation behavior.

Confidence: 86%Severity: 64%
Audit Metadata
Analyzed At
Oct 9, 2026, 04:16 PM
Package URL
pkg:socket/skills-sh/nowork-studio%2Fnotfair-plugin%2Fgohighlevel%2F@d8f03c1887400a8c47a61a083a3e9ce89ca11b9e63822834ebab6ca185e861fa