apify-audience-analysis

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose matches audience analysis, and its visible data flow to official Apify APIs is coherent, but its real footprint includes launching remote third-party Apify Actors with the user’s APIFY_TOKEN. That creates a meaningful supply-chain and credential-forwarding risk disproportionate to a simple analysis helper, even without direct evidence of malware.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Oct 25, 2026, 11:53 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fapify-audience-analysis%2F@6807d4f1d301e6a25415dd77b3342cf88eea423c