Security audit
Social Media Scheduler: post to Instagram, TikTok, X (Twitter), Threads, LinkedIn, Facebook, YouTube Shorts, Bluesky (1Social)
Security checks for vulnerabilities and agentic risk
Overview
This social-posting integration clearly discloses its data sharing and requires approval before publishing or uploading local files.
Connect only the accounts you intend to use and review each post’s content, destinations and timing. Drafts and media are sent to 1Social. Uploading local media creates a public link even if you later decline publication, and some networks require you to remove published posts manually.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.
