skills/calionauta/agent-sync-public/cali-social-publish/Socket

cali-social-publish

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's core purpose is coherent, and API endpoints are official, but its browser-session reuse and auto-publishing create elevated risk. The biggest issue is autonomous public posting plus processing untrusted URL content while having the ability to publish on the user's behalf.

Confidence: 86%Severity: 68%

Audit Metadata

Analyzed At

Jul 24, 2026, 06:41 PM

Package URL

pkg:socket/skills-sh/calionauta%2Fagent-sync-public%2Fcali-social-publish%2F@4438323631d243fe84e64117ed92bcb25dbd3f7872856ee8d5c981119a340d87