marketing-selling-point-generator
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s marketing-copy purpose is benign and its capabilities are mostly coherent, but install trust is poor: it routes users to a personal GitHub repo that does not clearly match the stated publisher, and the documented npm/pip install steps are not verifiable from the visible repo evidence. No confirmed credential theft or malicious execution is shown, but the provenance inconsistency and unverifiable install path make the skill medium-high risk.
Confidence: 89%Severity: 72%
Audit Metadata