skills/xpozpublic/xpoz-agent-skills/reddit-research/Socket

reddit-research

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The overall purpose is coherent and the Xpoz endpoints appear official, but the skill has medium risk due to shell-based trial token retrieval, asking users to paste credentials/codes into chat, and forwarding bearer tokens into a third-party CLI. Data flow is mostly consistent with a legitimate Reddit research integration, so this is not confirmed malicious.

Confidence: 86%Severity: 56%

Audit Metadata

Analyzed At

Aug 11, 2026, 11:15 AM

Package URL

pkg:socket/skills-sh/xpozpublic%2Fxpoz-agent-skills%2Freddit-research%2F@107dc4c0f952d84e74d568091ecdac4a083f3b1e92a0131ae902290c9c0ab10c