marketing-carousel-growth-engine

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill footprint is broadly coherent with its stated purpose of autonomous marketing carousel generation and publishing. It relies on standard external services (Gemini, Upload-Post) and environment-based credentials, with a strong autonomous workflow (no user prompts between steps). This combination is manageable but introduces notable security and governance considerations around credential management, data handling, and automated posting. It should be treated as SUSPICIOUS-to-MEDIUM risk until explicit safeguards (content validation, consent checks, rate limiting, credential rotation, audit logs) are in place. No direct credential harvesting, data exfiltration to unknown endpoints, or malicious behavior is evident, but the architecture leans toward high automation with significant third-party data flows.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 09:45 AM
Package URL
pkg:socket/skills-sh/Dev-Dennis-040%2Fopenclaw-agency-skills%2Fmarketing-carousel-growth-engine%2F@8c9bc36a78f04a0010a4343fbe2889b900b2ee1e
Security Audit — socket — marketing-carousel-growth-engine