x-article-publisher

Warn

Audited by Socket on Jul 27, 2026

2 alerts found:

Anomalyx2
AnomalyLOW
qiaomu-x-article-publisher-github/SKILL.md

SUSPICIOUS. The core purpose is coherent with browser automation for drafting X Articles, but the trust footprint is larger than necessary: persistent session storage, a third-party patched automation dependency, and transitive skill installation guidance. No clear exfiltration or overtly malicious behavior is shown, but the install and credential-handling model warrants caution.

Confidence: 87%Severity: 62%
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s core purpose matches its browser-automation behavior, and it does not show clear credential exfiltration or hidden malware. Risk comes from persistent session storage, use of a third-party stealth automation package, unpinned dependencies, and optional transitive skill use; these are meaningful but not fundamentally incompatible with the stated publishing purpose.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Jul 27, 2026, 01:21 AM
Package URL
pkg:socket/skills-sh/anbeime%2Fskill%2Fx-article-publisher%2F@20bd220df0a90f909a38fefd586dd33a06f42a8a209f73050f039eeb89cc790f
Security Audit — socket — x-article-publisher