apify-lead-generation
Warn
Audited by Socket on Oct 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose matches lead scraping via Apify, and data flows go to official Apify services, but the skill forwards an APIFY_TOKEN to runs involving many third-party/community Actors and an unshown local runner script. That combination is proportionate to the workflow yet still high-risk because credentials and collected lead data are processed by code outside the skill publisher’s direct control.
Confidence: 86%Severity: 79%
Audit Metadata