tech-stack-teardown

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is internally consistent for external tech-stack reconnaissance, but it meaningfully expands an agent's recon capability against third-party targets and optionally forwards an Apify token to a community-maintained actor. No clear credential theft or hidden exfiltration is present, yet the combination of scalable reconnaissance, untrusted external content processing, and third-party actor reliance makes this medium-to-high risk rather than benign.

Confidence: 85%Severity: 62%
Audit Metadata
Analyzed At
Jul 10, 2026, 03:08 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgooseworks-skills%2Ftech-stack-teardown%2F@921708b8cd178f2eb8f4748774ddecbd131a8a8eaee4eae4bbd56c9c787d61ac
Security Audit — socket — tech-stack-teardown