ghl
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The business purpose aligns with HighLevel usage and the instructions include sensible OAuth and approval guardrails, but the entire skill relies on an unverifiable local `ghl` binary that likely receives OAuth tokens and mediates all customer data access. That opaque dependency is disproportionate from a trust perspective even though the stated functionality itself is coherent.
Confidence: 89%Severity: 84%
Audit Metadata