marketer-github
Warn
Audited by Socket on Jun 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The GitHub CLI usage is proportionate and official, but the skill's real purpose is to insert a publisher-controlled remote script into a user's website and persist that connection via PR. The capability broadly fits the stated marketing integration goal, yet the external snippet/template source and live CDN runtime create medium risk because code and possible visitor data flow to the publisher outside GitHub with limited transparency or integrity guarantees.
Confidence: 100%Severity: 60%
Audit Metadata