ai-marketing-kit-orchestrator

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the overall marketing purpose matches many requested capabilities, but the trust story is not coherent. The main concern is transitive installation from a GitHub source whose ownership does not clearly match the claimed publishers, combined with broad credential use and high-impact publish/spend actions.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Oct 8, 2026, 07:27 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmarketing-skills%2Fai-marketing-kit-orchestrator%2F@31d4f866adfe4bf93c34830a2aa4f6aa284c180c6e8bb66a5716112512119de0