apify-lead-generation

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches lead scraping via Apify, and data flows go to official Apify services, but the skill forwards an APIFY_TOKEN to runs involving many third-party/community Actors and an unshown local runner script. That combination is proportionate to the workflow yet still high-risk because credentials and collected lead data are processed by code outside the skill publisher’s direct control.

Confidence: 86%Severity: 79%
Audit Metadata
Analyzed At
Oct 25, 2026, 11:56 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Fapify-lead-generation%2F@d3f63a8b07fe40ac077e80346d2b1f2ab9c491646e0dc430eed778852d8fc61e