skills/gooseworks-ai/goose-skills/linkedin-commenter-extractor/Socket

linkedin-commenter-extractor

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's purpose and capabilities mostly align, but it forwards the user's Apify token and input data to a third-party community actor on Apify rather than using a first-party API path. This is not confirmed malware, but the external trust boundary and credential forwarding make it medium risk.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Apr 10, 2026, 10:47 AM

Package URL

pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Flinkedin-commenter-extractor%2F@693d095b971c00b3e3290ca7a216cdb2ad52a7c5