growth-automation

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally coherent as social-media automation, but its actual footprint is high-risk because it automates public posting and account actions on X/Twitter outside official API workflows and explicitly supports long-running autonomous engagement. There is no strong evidence of credential theft, remote exfiltration, or malicious installers in the supplied text, so this is not confirmed malware; it is a high-risk automation skill with platform-abuse and autonomy concerns.

Confidence: 92%Severity: 76%
Audit Metadata
Analyzed At
Sep 22, 2026, 08:38 AM
Package URL
pkg:socket/skills-sh/nirholas%2Fxactions%2Fgrowth-automation%2F@ed97612c9b8a901625103db94cc4638d88b53043934d347ec738202ff4dfad92