social-publish-article
Warn
Audited by Socket on Jun 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the posting capability matches the stated purpose and the Buffer data flow is coherent, but the skill is distributed through third-party transitive installation from a personal GitHub repo and enables sensitive public posting actions. Main concerns are install trust and inherited-agent trust, not confirmed malware.
Confidence: 87%Severity: 62%
Audit Metadata