skills/clawlink-hq/skills/postiz/Socket

postiz

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: install provenance looks legitimate, but the skill's core model is a third-party ClawLink proxy that stores a local credential and mediates all Postiz access and posting actions. That makes the data flow and delegated authority broader than a direct Postiz integration, with added risk from public-posting side effects.

Confidence: 86%Severity: 68%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:44 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fpostiz%2F@02583f216ce5256b912c8d4fcac7c1c5a64c2008ee7eb4ca402582cbe32650b2