reddit-post-engine

Warn

Audited by Socket on Apr 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core drafting behavior is coherent and mostly proportionate, but the optional posting path routes actions through a third-party Composio MCP rather than directly to Reddit, creating meaningful credential and data-flow trust risk. Explicit user confirmation limits abuse, so this is not malicious, but it is medium-risk due to third-party credential/action mediation and public-posting capability.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Apr 19, 2026, 08:36 AM
Package URL
pkg:socket/skills-sh/Varnan-Tech%2Fopendirectory%2Freddit-post-engine%2F@e22f1fac05ccfc3010430fa03462e2d5964e84bb