youtube-apify-transcript

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose is coherent, but its real footprint relies on sending an APIFY_API_TOKEN and user URLs to a third-party community Actor running on Apify, plus deliberate bot-detection bypass via residential proxies. This is not confirmed malware, but it is a medium-risk external trust and credential-forwarding pattern for a simple transcript task.

Confidence: 87%Severity: 62%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:50 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fyoutube-apify-transcript%2F@0a20ee528475efd92a351977966ddde28b5c42d3