Back to skill

Security audit

Posthive

Security checks across malware telemetry and agentic risk

Overview

This skill is a clear Posthive CLI guide for drafting and scheduling social media posts, with expected risks around connected social accounts and local login storage.

Install only if you trust Posthive and are comfortable giving its CLI access to connected social accounts. Review drafts before approval, confirm target accounts and timezone before scheduling, and be careful with approve, update, and delete commands because they can affect public content.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.