social-bridge
Warn
Audited by Socket on Aug 26, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the overall workflow matches the stated social aggregation purpose, but the authenticated browser-automation dependency is not verified here, and the skill ingests untrusted social content while enabling automated forwarding and persistence. The main concerns are install trust for surf, broad authenticated session handling, and prompt-injection risk from public content rather than confirmed malware.
Confidence: 79%Severity: 74%
Audit Metadata