google-ads-audit

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's core behavior is mostly aligned with its stated Google Ads audit purpose, and there is no strong malware or installer signal. The main risk is data-flow trust: sensitive Google Ads data and saved audit history pass through NotFair's hosted intermediary, and external website content is fetched and persisted into context reused by other skills. This is coherent for a managed ads-audit platform, but it carries medium security risk due to third-party data handling and indirect prompt-injection exposure.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 13, 2026, 03:22 AM
Package URL
pkg:socket/skills-sh/nowork-studio%2FNotFair%2Fgoogle-ads-audit%2F@9792a58a52bb19bb2dd1804638ed9af31665fbde93600598fc7bf974633d65a7
Security Audit — socket — google-ads-audit