social-sbti

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's capabilities broadly match its stated purpose of social-profile scraping and parody scoring, and I do not see clear malicious exfiltration behavior. However, it requires high-value credentials, uses raw session cookies, and delegates core behavior to an insufficiently verifiable local CLI plus implicit pip installs, making install trust and credential exposure disproportionate enough to classify as suspicious rather than benign.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Oct 14, 2026, 11:44 AM
Package URL
pkg:socket/skills-sh/backtthefuture%2Fhuangshu%2Fsocial-sbti%2F@42a58b73f532ce1b90010c2b21e80451cdfdd330ec3927dc151b367e9489ac08