social-media-engagement-agent
Warn
Audited by Socket on Jul 15, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s stated purpose is coherent and the text is mostly a benign planning/playbook guide, but it references an external Hermes Tweet capability that appears to route X/Twitter activity and API credentials through the third-party Xquik service rather than official X endpoints. Because the risky behavior is indirect and optional rather than embedded in this skill, this is better classified as suspicious than malicious.
Confidence: 84%Severity: 56%
Audit Metadata