feedgrab-batch

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the documented capabilities largely match a batch content grabber, but the skill depends on an external CLI with no provenance shown here and forwards multiple platform credentials/cookies into that tool. Risk is elevated further by the twitterapi.io intermediary for Twitter access, but there is no clear evidence of credential theft, stealth, or obviously malicious behavior in this skill text alone.

Confidence: 75%Severity: 61%
Audit Metadata
Analyzed At
Apr 20, 2026, 02:32 AM
Package URL
pkg:socket/skills-sh/iBigQiang%2Ffeedgrab%2Ffeedgrab-batch%2F@89868c46a1fbf5e58c2c0896ade209ea2a16c241
Security Audit — socket — feedgrab-batch