social-media-engagement-agent

Warn

Audited by Socket on Jul 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose is coherent and the text is mostly a benign planning/playbook guide, but it references an external Hermes Tweet capability that appears to route X/Twitter activity and API credentials through the third-party Xquik service rather than official X endpoints. Because the risky behavior is indirect and optional rather than embedded in this skill, this is better classified as suspicious than malicious.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Jul 15, 2026, 09:18 AM
Package URL
pkg:socket/skills-sh/lensetek%2FDigital-Marketing-Agent_Skills%2Fsocial-media-engagement-agent%2F@2d3738f5a06ea3bc863083b61ca8eadcf19dcd8c89093d4c1e9c3fe9321dc753
Security Audit — socket — social-media-engagement-agent