reddit-marketing-agent

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s behavior broadly matches its stated Reddit marketing purpose and its data flows go to expected services, but install provenance is inconsistent with the claimed publisher and relies on an external personal repo plus unpinned dependencies. No clear credential theft, covert exfiltration, or malicious execution is shown.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 23, 2026, 02:50 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmarketing-skills%2Freddit-marketing-agent%2F@1fc217cd18f9eb150b7f5921d50cd9f1581922f66c1e971059e03bdc65ad4228