social-media-poster
Warn
Audited by Socket on Mar 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The stated purpose matches social posting, so the requested social-platform credentials are broadly proportionate. However, the skill explicitly supports automatic and scheduled posting across multiple platforms, which is a high-risk autonomous real-world action. It also omits critical trust details: no install path, no implementation, no endpoint list, and no explanation of whether credentials go directly to official APIs or through an intermediary service. With undocumented data flows and autonomous public posting capability, the skill is higher risk than a normal documentation-only integration.
Confidence: 90%Severity: 74%
Audit Metadata