agency-carousel-growth-engine

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s scraping, image generation, and analytics loop fit its stated marketing purpose, and the cited tooling largely maps to official vendors. The main issue is not hidden malware but scope and autonomy: it is designed to make unsupervised public posts, self-schedule future actions, and route publishing/analytics through a third-party intermediary with account credentials. That combination creates high real-world risk even though the purpose is coherent.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Oct 5, 2026, 09:27 AM
Package URL
pkg:socket/skills-sh/harshsinghmp%2Fskills%2Fagency-carousel-growth-engine%2F@5c8e5f3b6e046cabc4bb6a15cdcbe766eccb66178b122377fc3ec70e1e5b2233