skills/lihanghang/agent-daily-blog/content-collector/Socket

content-collector

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill's real footprint depends heavily on other unverified skills and processes untrusted web content while retaining write/upload capabilities. The main risks are transitive skill installation and indirect prompt injection, not confirmed malware or credential harvesting.

Confidence: 84%Severity: 61%

Audit Metadata

Analyzed At

Jun 19, 2026, 08:41 PM

Package URL

pkg:socket/skills-sh/lihanghang%2Fagent-daily-blog%2Fcontent-collector%2F@2f497294870ba398b7826f2d25fe963bbeffaaff419bd58ea6ce6d7537305b87