ios-marketing-capture-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s actual capabilities are broadly consistent with iOS screenshot automation and there is no evident exfiltration, credential harvesting, or malicious command execution. The main concern is transitive trust: it asks the agent to install third-party skills from mutable GitHub-backed sources, with slightly ambiguous publisher identity and no pinning/checksum verification.

Confidence: 92%Severity: 54%
Audit Metadata
Analyzed At
Oct 8, 2026, 07:29 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmarketing-skills%2Fios-marketing-capture-automation%2F@f4857ebcf9827ecf9d17708dce3773673821ab8b03bb69f01755c6cb940ff4c7