social-bridge

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the overall workflow matches the stated social aggregation purpose, but the authenticated browser-automation dependency is not verified here, and the skill ingests untrusted social content while enabling automated forwarding and persistence. The main concerns are install trust for surf, broad authenticated session handling, and prompt-injection risk from public content rather than confirmed malware.

Confidence: 79%Severity: 74%
Audit Metadata
Analyzed At
Aug 26, 2026, 06:02 PM
Package URL
pkg:socket/skills-sh/grahama1970%2Fagent-skills%2Fsocial-bridge%2F@6e7f937bb25c0765708b128f695906d5e41068c9
Security Audit — socket — social-bridge