linkedin-commenter-extractor

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and data flow are mostly coherent, but it relies on a community-maintained Apify actor that receives the user’s Apify token and performs the core extraction out of view. This is not clearly malicious, yet the third-party actor dependency and credential forwarding make it a medium-risk skill rather than fully benign.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Oct 18, 2026, 12:59 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Flinkedin-commenter-extractor%2F@8b8da1318bb961fba278858efb1174f6d739ff0fe9b6300d78b006bb2eb88ebf