crosspost

Warn

Audited by Socket on Jun 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but it enables autonomous public posting and includes a third-party batch-posting pattern that forwards content and credentials to an ambiguously verifiable intermediary domain instead of strictly using official platform APIs. Main risk is account/token exposure and unintended public actions, not confirmed malware.

Confidence: 87%Severity: 69%
Audit Metadata
Analyzed At
Jun 22, 2026, 01:43 PM
Package URL
pkg:socket/skills-sh/bcoaracy%2Fragdata%2Fcrosspost%2F@42c0f7d36aa3a4e7da6fbd04aaecb940b9db022212b9be2dbc65097c3158205c