skills/nowork-studio/notfair-plugin/google-analytics/Socket

google-analytics

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the wrapper's stated GA4 purpose is plausible, but its real behavior depends on an unseen canonical skill and a third-party hosted MCP gateway. The main risk is indirect access to Google Analytics data and configuration through NotFair infrastructure plus transitive plugin installation, not confirmed malware.

Confidence: 78%Severity: 72%

Audit Metadata

Analyzed At

Oct 9, 2026, 04:17 PM

Package URL

pkg:socket/skills-sh/nowork-studio%2Fnotfair-plugin%2Fgoogle-analytics%2F@daad235901383d87ed2d83d8d554871111e5872b66ec2779345fd26a9bc86503