skills/artwist-polyakov/polyakov-claude-skills/telegraph-publisher/Socket

telegraph-publisher

Warn

Audited by Socket on Mar 25, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

Overall BENIGN with MEDIUM security risk. The core Telegraph and GitHub workflows are coherent with the stated publishing purpose and use direct first-party APIs, but risk is raised by the legacy unofficial upload endpoint, optional TLS disabling, public third-party diagram rendering, and optional transitive skill use.

Confidence: 90%Severity: 58%

Audit Metadata

Analyzed At

Mar 25, 2026, 08:32 AM

Package URL

pkg:socket/skills-sh/artwist-polyakov%2Fpolyakov-claude-skills%2Ftelegraph-publisher%2F@7194f8f62d051bdbe629f13ee98115adc9334d2b