competitor-post-engagers

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's scraping, enrichment, and CSV export are broadly aligned with its lead-generation purpose, and Apollo data flows are official and proportionate. The main risk is trust: it routes user targets and an Apify-authenticated run through a third-party Apify community actor with limited provenance and no pinning or audit guidance, creating meaningful supply-chain and credential-forwarding exposure.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:12 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fcompetitor-post-engagers%2F@4848cff3d206be8422ac8a87026daccbdf7a7903e86dd15c40a83372ab25b950