blog-feed-monitor

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core RSS-monitoring purpose is coherent and low-risk in RSS-only mode, but the optional fallback expands trust to a non-official, community Apify actor that the skill itself says is unverified recently. That makes the Apify path a proportionally riskier third-party dependency/credential-forwarding pattern, though not confirmed malware.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:48 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fblog-feed-monitor%2F@a3482a8edeb211cf86488b7448ea6de8315f9392