naver-engage

Warn

Audited by Socket on Nov 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill’s tools and account actions align with its stated Naver engagement purpose, and it includes user confirmation for likes, follows, and enabling automation. Its main risk is that, once enabled, it autonomously publishes AI comments based on untrusted posts under the user’s identity. No malicious intent or credential exfiltration is evident in the supplied instructions.

Confidence: 91%Severity: 68%
Audit Metadata
Analyzed At
Nov 14, 2026, 03:07 AM
Package URL
pkg:socket/skills-sh/uplika%2Fuplika-plugin%2Fnaver-engage%2F@9dd483efde9ac0c05041d8b30b63503589b85456b518088e79e0cec6f341d67b