skills/gooseworks-ai/goose-skills/reddit-post-finder/Socket

reddit-post-finder

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's purpose and capabilities are coherent, and it uses official Apify APIs rather than obvious malicious infrastructure. However, it forwards the user's Apify token to a community-maintained third-party actor, creating meaningful remote-code and credential-trust risk without local verification of the actor or the referenced script.

Confidence: 85%Severity: 61%

Audit Metadata

Analyzed At

Sep 17, 2026, 06:28 PM

Package URL

pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Freddit-post-finder%2F@0e04c535aa2588e983863d5e4059b41f30aabd923f835defda34f37605d9a165