review-scraper

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's purpose and basic dependency are coherent, but it routes work and a billing-capable Apify token through community-maintained Apify actors from unrelated publishers. This is not confirmed malware, yet the third-party credential forwarding and intermediary data flow create meaningful supply-chain and trust risk beyond a simple review-scraping helper.

Confidence: 87%Severity: 63%
Audit Metadata
Analyzed At
Oct 2, 2026, 07:13 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Freview-scraper%2F@95284dcfc9ddd1c0de20f1c7487aca7a964c016c5f5797de6a238f7f33628317