activecampaign
Warn
Audited by Socket on Mar 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The CRM purpose and official ActiveCampaign API pattern are coherent, but the skill’s core dependency is an unverified `activecampaign` binary that receives API credentials and business data. That unresolved supply-chain and credential-forwarding risk is disproportionate enough to classify the skill as suspicious rather than benign.
Confidence: 90%Severity: 85%
Audit Metadata