funding-signal-monitor

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core lead-generation purpose matches the web/HN/social monitoring behavior, but the skill expands trust to unspecified Apify-backed scrapers, forwards an API token to that external platform, and encourages chaining into other skills for real-world outreach. The footprint is not outright incompatible with the stated purpose, yet the third-party credentialed scraping path and transitive skill chaining make it medium risk.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:50 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Ffunding-signal-monitor%2F@24ac79199f21eb71274ba5c97d550893d11ea97e