gtm-meta-skill

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly coherent with its stated GTM orchestration purpose, but it has a large operational footprint, routes user data through Deepline-managed integrations, includes a mutable `curl|bash` installer, and can trigger outbound/CRM actions. The main concerns are install trust, intermediary data flow through Deepline, and third-party Apify actor provenance rather than clear malicious intent.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 17, 2026, 12:33 AM
Package URL
pkg:socket/skills-sh/getaero-io%2Fgtm-eng-skills%2Fgtm-meta-skill%2F@c764de37fbd33db379caed2877a02d29abcaa6d2