skills/dfectuoso/frontpage-sh-skills/frontpage-buy-ad/Socket

frontpage-buy-ad

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is coherent with its stated purpose and uses official frontpage.sh endpoints, but it enables autonomous financial transactions and relies on transitive installation from a personal GitHub publisher. Main risk is real-world payment execution, not credential theft or hidden exfiltration.

Confidence: 88%Severity: 62%

Audit Metadata

Analyzed At

Jun 26, 2026, 02:52 AM

Package URL

pkg:socket/skills-sh/DFectuoso%2Ffrontpage-sh-skills%2Ffrontpage-buy-ad%2F@8e8e549bcf15f2b8a9b798311767df1b9f8ceb3fa0a0c60dbc5df29c18d1f1b6