nurture-value-factory

Warn

Audited by Socket on Nov 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill’s footprint depends on transitive installation and invocation of many other skills/repos without pinning, provenance checks, or clear data-handling limits. No direct malware or credential theft appears in this skill, yet the downstream trust chain and possible sharing of sensitive lead/company context raise medium security risk.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Nov 1, 2026, 03:56 PM
Package URL
pkg:socket/skills-sh/victor-shulga%2Fmarketing-engine-skills%2Fnurture-value-factory%2F@5a896465e8fb3d7ab87333a82f70877389ed9c919e17e2d17ecd879379460ca1