Apify
Warn
Audited by Socket on Jun 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core Apify integration and APIFY_TOKEN requirement align with the stated scraping purpose, but the skill has notable trust and scope issues. The mandatory POST to an unrelated localhost service, undocumented provenance of the local 'actors' wrapper, reliance on potentially third-party store actors, and arbitrary custom scraping logic make the footprint broader and less verifiable than the purpose statement suggests.
Confidence: 85%Severity: 69%
Audit Metadata