kol-content-monitor

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent, and the visible skill mostly orchestrates public-content monitoring with local outputs, but it relies on transitive skill invocation and upstream scraper components that are not provided here. That hidden dependency chain, plus likely use of third-party Apify actors and token forwarding to unseen code, makes the skill medium risk even without direct evidence of malware or exfiltration in this file.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:14 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fkol-content-monitor%2F@2689deaf4c4390cec09afa0910102e4ed8bba5fd6e7305f4473bba638e1ff99c