skills/nowork-studio/notfair-plugin/google-analytics/Socket

google-analytics

Warn

Audited by Socket on Aug 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the alias itself is minimal, but the available evidence shows Google Analytics data and likely auth are routed through a third-party NotFair MCP endpoint rather than direct Google APIs. Same-org install provenance lowers supply-chain concern, yet the hidden delegated workflow and third-party credential/data path make the skill medium-high risk.

Confidence: 77%Severity: 72%

Audit Metadata

Analyzed At

Aug 15, 2026, 03:15 PM

Package URL

pkg:socket/skills-sh/nowork-studio%2Fnotfair-plugin%2Fgoogle-analytics%2F@c90e8c70c3edec719f2dbee9b8d331f936f5eb82d523fc85ef31659118151bc3