Security audit

Social Media Automation

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed social-media automation CLI, but users should treat it as capable of real public account actions and local credential storage.

Install only if you are comfortable giving the tool access to your social-media accounts. Use a test account first, keep .env out of source control and backups, restrict file permissions where possible, review scheduled/recurring posts before enabling them, and rotate tokens if they may have been exposed.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (6)

Missing User Warnings

Medium

Confidence: 73% confidence
Finding: The README instructs users to place live API credentials in a .env file but does not warn that these secrets must be protected from source control, logs, shell history, and shared systems. In a skill intended to automate access to social-media accounts, poor secret-handling guidance materially increases the chance of credential leakage and subsequent account takeover or API abuse.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The documentation advertises commands that can post, reply, like, retweet, and schedule content against live social media accounts, but it does not prominently warn that these operations cause real external side effects on public accounts. In an agent-skill context, unclear side-effect disclosure increases the risk of unintended account actions, reputational damage, spam, or policy violations if a user or agent invokes these commands assuming they are only examples or simulations.

Missing User Warnings

Medium

Confidence: 78% confidence
Finding: The CLI saves OAuth access tokens immediately after interactive authentication without warning the user where they will be stored or whether the storage is protected. If tokens are written to an insecure location such as a plaintext file or repo working directory, they can be exposed through local compromise, backups, logs, or accidental commits, enabling account takeover of connected social media accounts.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The function persists long-lived access credentials directly into a .env file without user confirmation, permission checks, secure file creation, or warnings about the sensitivity of the data. In a local automation skill, this increases the chance of accidental credential exposure through source control, backups, shared directories, or overly permissive filesystem access.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The Telegram bot token is placed directly into request URLs, which is how the Telegram Bot API works, but this still creates credential exposure risk because full URLs are commonly captured by proxies, HTTP client debug logs, APM tools, error traces, and reverse proxies. If the token leaks, an attacker can impersonate the bot, send messages, and access bot-related operations.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: This code logs full API parameters and full API responses directly, which can expose sensitive data such as access tokens, session identifiers, user content, PII, or internal system details into local log files or console output. In a social media automation context, API payloads commonly contain credentials, account metadata, and post contents, so unsanitized debug logging materially increases the risk of data leakage through log access, retention, aggregation, or accidental sharing.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.