linkedin-commenter-extractor

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and data flow are mostly coherent, but it relies on a community-maintained Apify actor that receives the user’s Apify token and performs the core extraction out of view. This is not clearly malicious, yet the third-party actor dependency and credential forwarding make it a medium-risk skill rather than fully benign.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:12 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Flinkedin-commenter-extractor%2F@105190acdb8df63e489746696765f01858f17d79bc9d5d90f7e882bdf65c3a87