skills/indranilbanerjee/digital-marketing-pro/schedule-social/Socket

schedule-social

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core posting workflow matches the stated purpose, but the trust boundary is weak. The skill performs public posting actions and routes sensitive marketing content through unspecified MCP servers while invoking several unverified local executables, creating high execution-trust risk despite otherwise coherent functionality.

Confidence: 84%Severity: 76%

Audit Metadata

Analyzed At

Apr 1, 2026, 01:22 AM

Package URL

pkg:socket/skills-sh/indranilbanerjee%2Fdigital-marketing-pro%2Fschedule-social%2F@94c0646c1582a0f34705474263e197aa6c487637