bat-submit

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s broad behavior mostly matches its stated purpose, but it combines unpinned third-party CLI installation, credential use through that CLI, and autonomous public submission without per-action confirmation. The main concern is trust and control delegation to bat-cli and unseen authentication/reference flows, not clear evidence of malware.

Confidence: 79%Severity: 72%
Audit Metadata
Analyzed At
Aug 14, 2026, 08:52 AM
Package URL
pkg:socket/skills-sh/bataitools%2Fbat-skills%2Fbat-submit%2F@7d62dc879007bf0ecdb7034a437dec5b6526c51074ec18701ec55d6852c1e02a
Security Audit — socket — bat-submit