skills/sergebulaev/x-skills/x-marketing/Socket

x-marketing

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly

Anomalyskills/x-post-writer/SKILL.md

LOW

AnomalyLOW

skills/x-post-writer/SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its stated purpose, and the Publora/X data flow is proportionate, but install trust is weaker because the skill is distributed from a personal repo while handling publishing credentials for a third-party SaaS. This looks more like a medium-risk trust/supply-chain issue than malware.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Oct 16, 2026, 07:16 AM

Package URL

pkg:socket/skills-sh/sergebulaev%2Fx-skills%2Fx-marketing%2F@ea61d1d0f8874dd20633d241d52a297d57099483