marketing-carousel-growth-engine
Warn
Audited by Socket on Apr 7, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill is purpose-consistent as a social media automation tool, but its actual footprint is high risk: it performs autonomous public posting without per-action approval, self-schedules future runs, and routes publishing/analytics through a third-party Upload-Post service rather than official TikTok/Instagram APIs. This looks more like a powerful marketing bot than confirmed malware, but the combination of credential forwarding, intermediary data flows, and no-confirmation real-world actions makes it a high-risk skill.
Confidence: 89%Severity: 84%
Audit Metadata