social-media-poster

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose matches social posting, so the requested social-platform credentials are broadly proportionate. However, the skill explicitly supports automatic and scheduled posting across multiple platforms, which is a high-risk autonomous real-world action. It also omits critical trust details: no install path, no implementation, no endpoint list, and no explanation of whether credentials go directly to official APIs or through an intermediary service. With undocumented data flows and autonomous public posting capability, the skill is higher risk than a normal documentation-only integration.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Mar 17, 2026, 01:19 AM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fclaude-code-skills%2Fsocial-media-poster%2F@f2b3db47fce1c4eb98fdd65e46c8a58fd1fd74e9
Security Audit — socket — social-media-poster