counter-narrative

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core marketing purpose is coherent, and there is no explicit credential theft or third-party data routing, but the skill requires an unverified local executable (narrative-mapper.py) with no provenance and processes untrusted external evidence that can influence execution. Main concern is install/execution trust and prompt-injection exposure, not confirmed malware.

Confidence: 82%Severity: 74%
Audit Metadata
Analyzed At
Apr 1, 2026, 01:20 AM
Package URL
pkg:socket/skills-sh/indranilbanerjee%2Fdigital-marketing-pro%2Fcounter-narrative%2F@4665e9ee57d2e59da04967d37787a1a32df1ee5e