post-publisher
Warn
Audited by Socket on May 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Typefully integration is coherent and uses official endpoints with proportionate credentials, so it is not malware-like. However, the skill performs autonomous public-posting actions and includes an outdated image workflow that routes media through unrelated public host catbox.moe despite Typefully now supporting media upload, creating unnecessary third-party exposure.
Confidence: 88%Severity: 58%
Audit Metadata