directory-submitter

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill description is broadly coherent with its stated purpose: it automates product submissions to directories, uses local workflow and profile files, and maintains a per-product progress log. Data flows are straightforward (local reads, external form submissions via browser automation, and local logging). No evident credential handling, exfiltration, or malware behavior is described. Potential risks are mostly around misuse (spam submissions, privacy of product data) and the implied reliance on browser automation tools and local files. Overall risk is moderate with benign intent if used as described; ensure misuse controls and rate-limiting in practice.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 08:43 PM
Package URL
pkg:socket/skills-sh/borjasolerme%2Fagent-skills%2Fdirectory-submitter%2F@386d644822b1233325a96ad15b132a81111a056a