distribb

Warn

Audited by Socket on Aug 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the main Distribb API integration is largely coherent and routes data to the claimed official service, but the skill has a broad action surface with public posting/publishing, email-style replies, and Microworkers actions, plus a transitive install of another skill that materially expands trust and credential exposure. Not confirmed malware, but medium-high operational and supply-chain risk for an AI agent skill.

Confidence: 88%Severity: 68%
Audit Metadata
Analyzed At
Aug 22, 2026, 11:50 AM
Package URL
pkg:socket/skills-sh/bomx%2Fdistribb-skill%2Fdistribb%2F@061a055768e13cf09108932a90aeb2e957183858
Security Audit — socket — distribb