producthunt
Fail
Audited by Socket on Mar 18, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
SUSPICIOUS. The skill’s Product Hunt automation purpose matches its browser actions, but the footprint is high risk: remote curl|bash installation, external credential helper dependency, and autonomous public actions like commenting and upvoting. No clear evidence of outright credential theft is present, but install trust and action scope are disproportionate enough to classify it as suspicious rather than benign.
Confidence: 81%Severity: 78%
Audit Metadata