skills/tryshift-sh/skills-store/square-post/Socket

square-post

Warn

Audited by Socket on Mar 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose matches posting to Binance Square, but its actual data flow depends on a Shift-controlled router rather than direct official Binance endpoints. That intermediary auth/data path plus autonomous public posting makes the skill medium-high risk even without clear malware or a download-execute installer.

Confidence: 82%Severity: 68%

Audit Metadata

Analyzed At

Mar 13, 2026, 10:35 AM

Package URL

pkg:socket/skills-sh/tryshift-sh%2Fskills-store%2Fsquare-post%2F@181b351c941f5a64bfd70b549dc65d89dcdb1f2f