buffer
Warn
Audited by Socket on Sep 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated purpose matches its behavior, but it routes Buffer access and authentication through Unbrowse’s third-party hosted MCP instead of official Buffer endpoints. This is disclosed rather than hidden, so it is not confirmed malware, but the intermediary credential/data flow and broader browser tooling make it medium risk.
Confidence: 87%Severity: 58%
Audit Metadata