reddit-marketing-agent

Warn

Audited by Socket on May 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s core capabilities mostly fit Reddit marketing research/response drafting, and credentials flow to expected APIs, but trust is weakened by the mismatch between the claimed ara.so publisher and an unrelated personal GitHub install source with unpinned dependencies. Risk is moderate rather than malicious because there is no clear credential harvesting, exfiltration endpoint, or dangerous pre-execution behavior in the provided content.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
May 18, 2026, 11:56 PM
Package URL
pkg:socket/skills-sh/Aradotso%2Fmarketing-skills%2Freddit-marketing-agent%2F@be9d4617ce1e52cabec3c5c80e4f9c4de2a2f6fc
Security Audit — socket — reddit-marketing-agent