juejin
Warn
Audited by Socket on Jul 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's read/publish behavior aligns with its stated Juejin purpose and there is no obvious malware or remote installer, but it relies on full account session cookies obtained through a third-party connector domain and can perform public posting on the user's behalf. That combination makes the skill medium risk even with confirmation gating.
Confidence: 82%Severity: 57%
Audit Metadata