write-article

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s broad publishing workflow mostly matches its stated purpose, but it enables autonomous public posting and scheduling across multiple services, including unspecified 'Blog MCP' and scheduler components whose ownership, endpoints, and credential handling are not verifiable from the skill. Main risk is high-impact automation and ambiguous data flow, not confirmed malware.

Confidence: 85%Severity: 72%
Audit Metadata
Analyzed At
Mar 22, 2026, 10:20 PM
Package URL
pkg:socket/skills-sh/Sammii-HK%2Fskills%2Fwrite-article%2F@ed9fcd0297404216cd28c9849f86bdc7134a2b28