content-factory
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill is largely aligned with its stated purpose, but it concentrates broad social-media automation powers, routes actions through third-party MCP infrastructure, and chains multiple other skills/tools. This looks more like a high-risk automation orchestrator than malware, with the main concerns being autonomous posting/DM behavior, credential forwarding to Composio, and transitive trust expansion.
Confidence: 87%Severity: 76%
Audit Metadata