producthunt

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS. The skill’s Product Hunt automation purpose matches its browser actions, but the footprint is high risk: remote curl|bash installation, external credential helper dependency, and autonomous public actions like commenting and upvoting. No clear evidence of outright credential theft is present, but install trust and action scope are disproportionate enough to classify it as suspicious rather than benign.

Confidence: 81%Severity: 78%
Audit Metadata
Analyzed At
Mar 18, 2026, 11:08 PM
Package URL
pkg:socket/skills-sh/manojbajaj95%2Fgtm-skills%2Fproducthunt%2F@1038bf8119ed4fbc7a9118034aa4bfcc23b3da05