threads-growth-skill

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is coherent for a Threads analytics/drafting skill, but install trust is weak: it clones from an unrelated personal GitHub repo, then executes repo shell scripts with access to Threads session cookies and sets a recurring cron job. That mismatch between publisher branding and code source, plus unverifiable script behavior and docs/runtime inconsistency, makes the skill medium-high risk even without confirmed malicious behavior.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Sep 21, 2026, 01:53 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmarketing-skills%2Fthreads-growth-skill%2F@a5d280eb6f1c347b34e6a94e9f679c16601fbc7bf3a28b3aa26bbe5a06f82907
Security Audit — socket — threads-growth-skill