discord-post-news

Warn

Audited by Socket on Jun 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core behavior matches the stated purpose of posting a news brief to Discord, and the endpoint/POST format are consistent with official Discord webhooks. Risk comes from autonomous external posting, use of a stored webhook secret, and reliance on unseen local enforcement scripts; these are more concerning than the visible prompt itself, but there is no clear evidence of malware or deceptive exfiltration beyond the declared Discord post.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Jun 18, 2026, 03:31 AM
Package URL
pkg:socket/skills-sh/inbharatai%2FOpenClaw-AI-CMO%2Fdiscord-post-news%2F@ee25c424680bb736f2c94e90af7a8d291e6557f64220a791410f82633eb7b3f9
Security Audit — socket — discord-post-news