content-factory

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The visible wrapper is coherent with a content-automation skill, but it instructs the agent to obey unseen local playbooks and subagents exactly, creating a transitive trust problem. The claimed autonomous publishing capability is inherently high impact, and the real credential, network, and execution footprint cannot be verified without the referenced files.

Confidence: 76%Severity: 63%
Audit Metadata
Analyzed At
Jul 31, 2026, 12:22 PM
Package URL
pkg:socket/skills-sh/huytieu%2FCOG-second-brain%2Fcontent-factory%2F@b433e64ed957b68fa1fc0c9599e03a7faac5f654116283c1a6d4d66c6ac09056
Security Audit — socket — content-factory