affiliate-check

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Security
SecurityMEDIUM
skills/content/reddit-post-writer/SKILL.md

SUSPICIOUS. The skill is internally coherent, but its purpose is to help the agent craft evasive affiliate promotion for public platforms and avoid moderation signals. There is no clear malware behavior, credential theft, or untrusted installer, but the public-posting and ban-evasion guidance makes it a high-risk manipulation skill rather than a benign writing aid.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Oct 20, 2026, 06:46 PM
Package URL
pkg:socket/skills-sh/affitor%2Faffiliate-skills%2Faffiliate-check%2F@f4cb063a0ee83b1b9e5167e396ab46cc9123dadc