skills/sergebulaev/threads-skills/threads-marketing/Socket

threads-marketing

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly

Anomaly.codex-marketplace/threads-skills/skills/threads-hook-extractor/SKILL.md

LOW

AnomalyLOW

.codex-marketplace/threads-skills/skills/threads-hook-extractor/SKILL.md

SUSPICIOUS. The skill’s purpose is coherent and mostly well-scoped, but it has a notable trust-boundary issue: official Apify transport is used to run a third-party scraping actor, creating medium supply-chain and credential-forwarding risk without pinning or stronger provenance controls. No direct malware, exfiltration, or hidden execution is evident.

Confidence: 91%Severity: 55%

Audit Metadata

Analyzed At

Oct 16, 2026, 07:17 AM

Package URL

pkg:socket/skills-sh/sergebulaev%2Fthreads-skills%2Fthreads-marketing%2F@8a7f4356f29794ced662941d9c17b2ad6009aca7