social-media-poster

Warn

Audited by Socket on Mar 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose matches social posting, so the requested social-platform credentials are broadly proportionate. However, the skill explicitly supports automatic and scheduled posting across multiple platforms, which is a high-risk autonomous real-world action. It also omits critical trust details: no install path, no implementation, no endpoint list, and no explanation of whether credentials go directly to official APIs or through an intermediary service. With undocumented data flows and autonomous public posting capability, the skill is higher risk than a normal documentation-only integration.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Mar 17, 2026, 01:19 AM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fclaude-code-skills%2Fsocial-media-poster%2F@f2b3db47fce1c4eb98fdd65e46c8a58fd1fd74e9