distribb

Warn

Audited by Socket on Oct 13, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is mostly coherent with a very broad marketing-platform purpose and primarily talks to official distribb.io endpoints, but its footprint is unusually expansive. The biggest risks are transitive installation of another skill, broad third-party integration reach (including banks/databases/GitHub), and autonomous public/account actions across social, ads, outreach, and publishing.

Confidence: 89%Severity: 76%
Audit Metadata
Analyzed At
Oct 13, 2026, 11:46 PM
Package URL
pkg:socket/skills-sh/bomx%2Fdistribb-skill%2Fdistribb%2F@01bbede516a8963bff5731bbda412f0e2a364188