wjs-promoting-skills
Warn
Audited by Socket on May 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is purpose-aligned but high risk because it enables unattended real-world public posting on the user's X account every day. The main concerns are autonomous posting, ingestion of external content into generation, and reliance on a non-official posting CLI with unclear provenance; this looks risky and overpowered for an agent skill, but not clearly malicious.
Confidence: 84%Severity: 78%
Audit Metadata