growth-model-analyzer

Fail

Audited by Socket on Mar 12, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The growth-model analyzer skill appears broadly aligned with its stated purpose. It focuses on data-driven growth analytics, segmentation, uplift modeling, and ROI optimization using standard analytics libraries. There are no evident credential accesses, download/install chains, or external data exfiltration patterns described. The main risk area is potential misuse in an agent environment where file writes or shell commands could be employed to read/write sensitive files or to contact external endpoints if outputs are exposed or misrouted. Overall, given the described scope and tools, the skill is BENIGN with MEDIUM securityRisk due to permissive tool access (Write, Bash) and the possibility, in extended deployments, of data leakage via outputs. Recommend implementing output access controls and explicit data-handling policies if deployed in an agent context.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 12, 2026, 05:36 AM
Package URL
pkg:socket/skills-sh/liangdabiao%2Fclaude-data-analysis-ultra%2Fgrowth-model-analyzer%2F@02d859233092895c93024f0c42fabb816c43707a