social

Warn

Audited by Socket on Oct 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s social-media capabilities and consent guidance are coherent with its stated purpose, and the supplied instructions show no clear exfiltration or deceptive behavior. However, installation executes an unpinned remote script, and the resulting CLI handles authenticated account access without verified installer integrity or release provenance. Treat as high security risk pending verification; malicious intent is not confirmed.

Confidence: 88%Severity: 82%
Audit Metadata
Analyzed At
Oct 31, 2026, 06:37 AM
Package URL
pkg:socket/skills-sh/usesocial%2Fskill%2Fsocial%2F@27802901a69c904a153a4d52a003dbf1fd5b01cc48ebf1df0cf178aafa744674