social-sbti
Warn
Audited by Socket on Oct 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's capabilities broadly match its stated purpose of social-profile scraping and parody scoring, and I do not see clear malicious exfiltration behavior. However, it requires high-value credentials, uses raw session cookies, and delegates core behavior to an insufficiently verifiable local CLI plus implicit pip installs, making install trust and credential exposure disproportionate enough to classify as suspicious rather than benign.
Confidence: 85%Severity: 78%
Audit Metadata