apify-actorization

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
references/cli-actorization.md

No clear malware or intentional sabotage is present in this documentation and example code. The main security risk is the Dockerfile's unverified `curl | sh` execution and unpinned installation of GitHub and npm dependencies, which could permit a compromised upstream or mutable dependency to execute during builds. Pin versions, verify checksums or signatures, and avoid piping remote content directly to a shell.

Confidence: 98%Severity: 52%
Audit Metadata
Analyzed At
Sep 16, 2026, 03:09 AM
Package URL
pkg:socket/skills-sh/apify%2Fapify-claude-code-plugin%2Fapify-actorization%2F@4af57dbc6759e6b41b2de68f487a7693c3caf5c424f91213fb09fff2a83c8a62
Security Audit — socket — apify-actorization