write-article
Warn
Audited by Socket on Mar 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s broad publishing workflow mostly matches its stated purpose, but it enables autonomous public posting and scheduling across multiple services, including unspecified 'Blog MCP' and scheduler components whose ownership, endpoints, and credential handling are not verifiable from the skill. Main risk is high-impact automation and ambiguous data flow, not confirmed malware.
Confidence: 85%Severity: 72%
Audit Metadata