social-push

Fail

Audited by Socket on Mar 11, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill presents a coherent and proportionate footprint for a social posting helper: it uses browser automation to draft posts and explicitly guards against automatic publishing, requiring user confirmation. Data flows are largely user-initiated and platform-bound, with drafts stored within the platform context via the authenticated browser session. There are no evident unverifiable binaries or credential harvest patterns. Minor concerns include reliance on browser session data for authentication and potential data exposure during multi-platform workflows; these are manageable with strict session control and clear user consent. Overall, the risk posture is low-to-moderate and aligned with the stated purpose.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 11, 2026, 07:38 AM
Package URL
pkg:socket/skills-sh/ZHangZHengEric%2FSage%2Fsocial-push%2F@186ec46d42944306f02ac2e34a84dad4d340c660