buffer

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches its behavior, but it routes Buffer access and authentication through Unbrowse’s third-party hosted MCP instead of official Buffer endpoints. This is disclosed rather than hidden, so it is not confirmed malware, but the intermediary credential/data flow and broader browser tooling make it medium risk.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 28, 2026, 10:57 AM
Package URL
pkg:socket/skills-sh/unbrowse-ai%2Fsites%2Fbuffer%2F@51d20ff1b7c262830567f5d90d125577492e4d8a2d206f683d150a46771c874e