social-media-carousel
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated purpose is coherent, but it depends on a third-party CLI, forwards user content and login material to external services, and instructs transitive skill installation. This looks more like a hosted-tool wrapper than a pure design guide, so the main concerns are install trust and expanded trust boundaries rather than confirmed malicious behavior.
Confidence: 78%Severity: 66%
Audit Metadata