kol-engager-icp

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose matches its scraping and enrichment behavior, and its credential scope is relatively narrow, but it routes the workflow through multiple community-maintained Apify Actors from unrelated publishers. The main risk is credential forwarding and remote execution trust in third-party scraping services, not confirmed malware.

Confidence: 89%Severity: 79%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:12 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fkol-engager-icp%2F@a9c9bb8faa20e8fe2fe460ae9c2f32ec14192a9d328c91e4d69e18c58580e8fe