social-signal-bot

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose matches social automation, and there is no clear malware, installer abuse, or third-party credential proxying. However, the skill enables autonomous public posting and ongoing monitoring of untrusted social content on the user's behalf, which is a high-risk capability and lacks explicit per-action approval boundaries.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Oct 24, 2026, 12:41 PM
Package URL
pkg:socket/skills-sh/sanctifiedops%2Fsolana-skills%2Fsocial-signal-bot%2F@f1b76918bc967f4341ccae2f10858a1283257453f435747e4575f2271202d62c