skills/acedatacloud/skills/substack/Socket

substack

Warn

Audited by Socket on Jul 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, and it does not show obvious malicious routing or installer abuse, but it relies on full-account session cookies and enables real-world publishing/email actions through undocumented internal APIs. Main risk is credential sensitivity and high-impact account actions, not confirmed malware.

Confidence: 84%Severity: 63%

Audit Metadata

Analyzed At

Jul 4, 2026, 03:22 PM

Package URL

pkg:socket/skills-sh/acedatacloud%2Fskills%2Fsubstack%2F@8409d24f9dc7cceb735101e79964d619aaeb66ddd9deb8af3c360ba3885286c3