social-publish-article

Warn

Audited by Socket on Jun 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the posting capability matches the stated purpose and the Buffer data flow is coherent, but the skill is distributed through third-party transitive installation from a personal GitHub repo and enables sensitive public posting actions. Main concerns are install trust and inherited-agent trust, not confirmed malware.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Jun 19, 2026, 12:45 AM
Package URL
pkg:socket/skills-sh/peter-tu-zynkr%2Fzynkr-skill-builder%2Fsocial-publish-article%2F@879140875c307968b6a11ec3662c839be9e7173852bddb4f19cac1ce53b332f3
Security Audit — socket — social-publish-article