marketer-github

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The GitHub CLI usage is proportionate and official, but the skill's real purpose is to insert a publisher-controlled remote script into a user's website and persist that connection via PR. The capability broadly fits the stated marketing integration goal, yet the external snippet/template source and live CDN runtime create medium risk because code and possible visitor data flow to the publisher outside GitHub with limited transparency or integrity guarantees.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 10:11 PM
Package URL
pkg:socket/skills-sh/OpenAnalystInc%2F10x-MM-Skill%2Fmarketer-github%2F@3eaa167eea1b6b94798152ecdb0b9319110e8d843145bd4c7931c3422e11ad84
Security Audit — socket — marketer-github