social-publisher

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Social Publisher skill appears to be a coherent, purpose-aligned automation tool for multi-platform publishing with scheduling, caption optimization, and analytics. It leverages standard cloud services and APIs; however, it involves multiple external integrations and data flows that could expose tokens or credentials if not properly protected. The overall threat level is low-to-moderate (benign with notable credential/data flow considerations). Proper secret management (secure vaults, scoped API tokens, audit logging) and explicit per-action user approvals for publishing would strengthen security posture.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 08:23 AM
Package URL
pkg:socket/skills-sh/claude-office-skills%2Fskills%2Fsocial-publisher%2F@3975712a5cdd49baa6645cc22beec0ba549561c3