competitor-post-engagers

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is broadly aligned with its lead-generation purpose, but it relies on an unpinned third-party Apify actor to collect LinkedIn engager data and exports personal interaction data at scale. No clear malware or credential-harvesting behavior is shown, yet the third-party scraping dependency and bulk personal-data handling make it medium risk.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:48 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fcompetitor-post-engagers%2F@78ac12b4cdec7276db48b7d2589753b9ee120e9a