ai-social-media-content

Fail

Audited by Socket on Mar 4, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill description coherently maps to AI-driven multi-platform content generation and publishing via a CLI-based workflow. However, the curl|sh install pattern and heavy reliance on external, transitive tool invocations create non-trivial supply-chain and data-flow risks. While automation offers clear value, explicit controls are needed for authenticated sessions, per-action user approvals, and strict data handling to mitigate exfiltration and mis-posting risks. Overall, the approach is Suspicious-to-Malignant in install and data-flow characteristics and should be reviewed before deployment with pinned installers, explicit token management, and robust publishing safeguards.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 4, 2026, 12:32 PM
Package URL
pkg:socket/skills-sh/tul-sh%2Fskills%2Fai-social-media-content%2F@80fd6b7de3a22e110603088926aa48c6c4a6890b