quark-mswnlz-publisher

Warn

Audited by Socket on Oct 4, 2026

2 alerts found:

SecurityAnomaly
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s capabilities mostly match its stated publishing purpose, but its trust footprint is too broad: it installs and uses third-party drive automation tools from partially unverifiable sources, then forwards powerful cloud-drive credentials to them. The GitHub/Telegram/site actions are expected for the workflow, yet the mixed-provenance dependency chain and credential forwarding make this a high-risk skill rather than benign.

Confidence: 89%Severity: 83%
AnomalyLOW
promo_files/1_解压密码869hr_uk_移动端双击这里.html

The fragment contains an unexplained automatic redirect from a page on 869hr.uk to ai123.869hr.uk. This is suspicious and warrants checking the destination and intended site behavior. The analytics and advertising loads are recognizable third-party integrations; the supplied delayed-loader markup is malformed. No clear evidence of malware or data theft is present in this fragment.

Confidence: 94%Severity: 57%
Audit Metadata
Analyzed At
Oct 4, 2026, 04:16 AM
Package URL
pkg:socket/skills-sh/wlzh%2Fskills%2Fquark-mswnlz-publisher%2F@b25b8b689a319c84ed57296f30a31db8c1fc4879b799f001c4f53f20ca0df849