facebook-leads
Warn
Audited by Socket on Jun 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s lead-generation purpose mostly matches its capabilities, but it relies on exposing a live Facebook session through third-party Reduck automation rather than official Facebook APIs. The optional write actions are clearly disclosed and gated, yet the combination of cookie-based auth, intermediary data flows, and transitive trust in another skill/service makes the overall security risk medium-high.
Confidence: 82%Severity: 68%
Audit Metadata