superx

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly
AnomalyLOW
references/skills/audience-export/card.json

No direct malware or executable supply-chain attack is evident in this metadata. The feature is designed for bulk harvesting and export of public engagement and user-profile data, including DM availability, creating a moderate privacy and data-governance risk. Further review of the implementation would be needed to determine whether access controls, platform authorization, rate limiting, consent, and retention safeguards are enforced.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Oct 12, 2026, 08:02 AM
Package URL
pkg:socket/skills-sh/superx-so%2Fsuperx-agent%2Fsuperx%2F@95774fb34a0246dc3866cd429b88741669828d66f6a8128103d538abf24b6f17