marketing-pipeline-share-content-automation
Warn
Audited by Socket on Jun 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated purpose broadly matches its capabilities, but trust is weakened by the mismatch between the stated publisher and the personal GitHub install source, plus the pipeline’s ingestion of untrusted web/social content with execution and file-writing capability. Credentials requested are proportionate and no direct credential theft or malicious exfiltration is shown.
Confidence: 84%Severity: 58%
Audit Metadata