ai-social-media-content
Fail
Audited by Socket on Mar 4, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
The skill description coherently maps to AI-driven multi-platform content generation and publishing via a CLI-based workflow. However, the curl|sh install pattern and heavy reliance on external, transitive tool invocations create non-trivial supply-chain and data-flow risks. While automation offers clear value, explicit controls are needed for authenticated sessions, per-action user approvals, and strict data handling to mitigate exfiltration and mis-posting risks. Overall, the approach is Suspicious-to-Malignant in install and data-flow characteristics and should be reviewed before deployment with pinned installers, explicit token management, and robust publishing safeguards.
Confidence: 95%Severity: 90%
Audit Metadata