pain-language-engagers

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, but the core workflow depends on unrelated community Apify actors and forwards the user's Apify token-backed execution to third-party code. This is a proportionate lead-generation workflow in concept, yet it carries high supply-chain and credential-forwarding risk because the actual scraping/enrichment logic runs outside the skill and outside first-party APIs.

Confidence: 87%Severity: 83%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:13 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fpain-language-engagers%2F@f17a8677697b61e3ec1e71e9f9e34f21d017840b87d510d96a9960e61fb1c2ae