quark-mswnlz-publisher
Audited by Socket on Oct 4, 2026
2 alerts found:
SecurityAnomalySUSPICIOUS. The skill’s capabilities mostly match its stated publishing purpose, but its trust footprint is too broad: it installs and uses third-party drive automation tools from partially unverifiable sources, then forwards powerful cloud-drive credentials to them. The GitHub/Telegram/site actions are expected for the workflow, yet the mixed-provenance dependency chain and credential forwarding make this a high-risk skill rather than benign.
The fragment contains an unexplained automatic redirect from a page on 869hr.uk to ai123.869hr.uk. This is suspicious and warrants checking the destination and intended site behavior. The analytics and advertising loads are recognizable third-party integrations; the supplied delayed-loader markup is malformed. No clear evidence of malware or data theft is present in this fragment.