gohighlevel
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s stated CRM purpose matches its capabilities, and its mutation safeguards are reasonable, but it routes sensitive CRM access and credentials through a third-party NotFair MCP service rather than direct official GoHighLevel APIs. That makes the main issue data-flow integrity and third-party credential trust, not overt malware or deceptive installation behavior.
Confidence: 86%Severity: 64%
Audit Metadata