social-publisher

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The publishing purpose matches the stated capabilities, but the trust boundary is unclear because the core `social-media-mcp` component is not verifiably sourced and likely mediates multi-account credentials and public posting. This is proportionate in function yet high-risk in execution due to unverified infrastructure and autonomous real-world actions.

Confidence: 84%Severity: 80%
Audit Metadata
Analyzed At
Sep 14, 2026, 09:54 PM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fsocial-publisher%2F@0efd74ec96a3cee477202ba8f5d368ca81d2d20a0b90c1d41b98bb0329c69c32
Security Audit — socket — social-publisher