ghl

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The business purpose aligns with HighLevel usage and the instructions include sensible OAuth and approval guardrails, but the entire skill relies on an unverifiable local `ghl` binary that likely receives OAuth tokens and mediates all customer data access. That opaque dependency is disproportionate from a trust perspective even though the stated functionality itself is coherent.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:46 PM
Package URL
pkg:socket/skills-sh/obra%2Fmuse-skills%2Fghl%2F@2ed439a5c7cbf235044d338c0648e85288344f970aa3d92d4992fadf02f1ab38