gtm-enrichment-smart
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The enrichment workflow itself is coherent, but the skill's core execution path relies on an unverifiable `orth` CLI that likely receives API credentials and brokers all provider traffic. That intermediary trust gap, combined with broad third-party data sharing, makes the skill high risk even though its stated purpose is legitimate.
Confidence: 86%Severity: 84%
Audit Metadata