competitor-content-tracker

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the skill's main risk is transitive trust: it chains multiple unspecified scraper skills and likely forwards an Apify token to upstream components or third-party actors. There is no direct evidence of malware or exfiltration to attacker-controlled endpoints in this skill text, but the opaque upstream trust boundary and unofficial scraping model make it medium risk.

Confidence: 83%Severity: 59%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:13 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fcompetitor-content-tracker%2F@af2a35ae6a511a01f5b284977807b75c31bf3864214986796d84079b8b7bc941