linkedin-influencer-discovery

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and requested credential are broadly coherent, and the only explicit install step is a benign PyPI package. However, the actual data flow relies on a community-maintained Apify actor outside the skill publisher's control, so user queries and the Apify-authenticated run are delegated to third-party hosted code. This is not confirmed malware, but it introduces medium trust and data-flow risk beyond a simple official API integration.

Confidence: 86%Severity: 54%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:13 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Flinkedin-influencer-discovery%2F@8280114ff165d0fed6f5d1af0464e0e792c9e9c2c5a71a8d68eae11a9501a033