marketing-carousel-growth-engine
Audited by Socket on Mar 11, 2026
1 alert found:
Obfuscated FileThe skill footprint is broadly coherent with its stated purpose of autonomous marketing carousel generation and publishing. It relies on standard external services (Gemini, Upload-Post) and environment-based credentials, with a strong autonomous workflow (no user prompts between steps). This combination is manageable but introduces notable security and governance considerations around credential management, data handling, and automated posting. It should be treated as SUSPICIOUS-to-MEDIUM risk until explicit safeguards (content validation, consent checks, rate limiting, credential rotation, audit logs) are in place. No direct credential harvesting, data exfiltration to unknown endpoints, or malicious behavior is evident, but the architecture leans toward high automation with significant third-party data flows.