user-generated-content

Pass

Audited by Socket on Sep 18, 2026

Checks

Malicious behaviorInjection, exfiltration, untrusted installs

Security concernsCredential exposure, tool/trust exploitation

Code obfuscationHidden or obfuscated code

Suspicious patternsReconnaissance, excessive autonomy, resource use

Audit Metadata

Analyzed At

Sep 18, 2026, 04:45 PM

Package URL

pkg:socket/skills-sh/vivy-yi%2Fxiaohongshu-skills%2Fuser-generated-content%2F@4e6874f3c2d13170e449e11b74f5553d3bd802059e8edf1a18516d8d5511d7ec