skills/acedatacloud/skills/hashnode/Socket

hashnode

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's blog-management purpose is coherent, but it achieves it by routing full-account session cookies into a local helper and relying on an internal Hashnode API plus a third-party reconnect domain. The main concern is disproportionate credential sensitivity and weaker trust/data-flow integrity than Hashnode's official PAT/GraphQL path, not confirmed malware.

Confidence: 88%Severity: 72%

Audit Metadata

Analyzed At

Aug 24, 2026, 05:42 PM

Package URL

pkg:socket/skills-sh/acedatacloud%2Fskills%2Fhashnode%2F@089a2861e78319446d2f17e13cb6e62231f517c0403ece53e1a6cc2ac5dbabdd