reddit-post-engine

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core drafting behavior is coherent and mostly proportionate, but the optional posting path routes actions through a third-party Composio MCP rather than directly to Reddit, creating meaningful credential and data-flow trust risk. Explicit user confirmation limits abuse, so this is not malicious, but it is medium-risk due to third-party credential/action mediation and public-posting capability.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
May 15, 2026, 05:54 PM
Package URL
pkg:socket/skills-sh/Varnan-Tech%2Fopendirectory%2Freddit-post-engine%2F@a656b140c27f93f414cfc91588e85b59657ff687
Security Audit — socket — reddit-post-engine