File appears to expose a hardcoded API secret or token.
Critical
- Code
- suspicious.exposed_secret_literal
- Location
- SKILL.md:32
Security audit
SocQ Linkedin Ad Library Research
Security checks across malware telemetry and agentic risk
Overview
This skill is a focused SocQ integration for researching public LinkedIn Ad Library data, with clear API key, billing, and usage guardrails.
Install only if you intend agents to use SocQ for public LinkedIn Ad Library research. Configure SOCQ_API_KEY carefully, watch credit costs, and require confirmation before broad or paid collection runs.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
Detected: suspicious.exposed_secret_literal