Posta

• Analyzed: May 11, 2026, 6:55 AM
• Findings: 1
• Version: 1.2.2
• Hash: 8cae31a0ad3f6ec2d167c89223457460255d72f5f42a37b6897ab4330bbcb176
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'posta' skill is a social media management tool designed to interact with the Posta API. It provides comprehensive bash helper functions in 'scripts/posta-api.sh' for managing posts, media, and analytics across multiple platforms. The skill includes proactive security measures, such as SSRF protection for URL-based media uploads and a credential discovery mechanism that is restricted to specific files (~/.posta/credentials, .env) and specific variable names. The instructions in 'SKILL.md' emphasize user confirmation and safety, and no evidence of malicious behavior, data exfiltration, or unauthorized execution was found.