apify-lead-generation

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core lead-generation purpose matches the capabilities, and the Apify/npm components are broadly consistent with the claimed workflow. Risk is elevated because the skill forwards `APIFY_TOKEN` into external tooling and an unseen local script, and it encourages use of third-party Apify Store actors that may process user inputs and data outside official Apify-maintained code.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Jun 28, 2026, 08:27 AM
Package URL
pkg:socket/skills-sh/ComeOnOliver%2Fskillshub%2Fapify-lead-generation%2F@e9c762d062401fc82ef8ddc502a2e40f4e6b3969a7749be49f7954288643f6e9
Security Audit — socket — apify-lead-generation