skills/dreammis/social-auto-upload/alipay-upload/Socket

alipay-upload

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose matches the capability, but the skill relies on a non-official third-party automation CLI to handle Alipay login and publishing. There is no clear exfiltration in the skill text, yet public-posting capability plus third-party session handling and source-based install trust make this a medium-risk skill.

Confidence: 82%Severity: 61%

Audit Metadata

Analyzed At

Oct 22, 2026, 11:28 PM

Package URL

pkg:socket/skills-sh/dreammis%2Fsocial-auto-upload%2Falipay-upload%2F@b9071398decb4fba221d96692074ab199b9f1769cc8a44c4f2b7822c2bbd7dba