skills/msapps-mobile/claude-plugins/scrape-company/Socket

scrape-company

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it forwards credentials and scrape jobs to a community-maintained third-party Apify actor without version pinning. Official Apify APIs reduce exfiltration concern, yet trust and credential-forwarding risks are still medium because the core execution depends on third-party actor code.

Confidence: 86%Severity: 63%

Audit Metadata

Analyzed At

Apr 28, 2026, 01:40 PM

Package URL

pkg:socket/skills-sh/MSApps-Mobile%2Fclaude-plugins%2Fscrape-company%2F@e3b508a11dc0d9106a37faef5d72eb80565d5f9b