Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is coherent as a Reddit automation skill, and the npm install path appears to be the upstream documented distribution for CamoFox rather than a fake payload. However, its core function is anti-detection browser automation for authenticated Reddit posting and voting, enabling autonomous public actions and evasion of platform controls; this makes it high-risk even without confirmed malware or credential exfiltration.
Confidence: 88%Severity: 74%
Audit Metadata