skills/tenfoldmarc/spy-skill/spy/Socket

spy

Warn

Audited by Socket on Apr 16, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core Instagram analysis workflow is broadly coherent, but the setup is undermined by a mismatched MCP install path and token forwarding to third-party code not documented by Apify. The added prompt to install another skill further expands trust unnecessarily.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Apr 16, 2026, 07:37 AM

Package URL

pkg:socket/skills-sh/tenfoldmarc%2Fspy-skill%2Fspy%2F@6c1dd4dae7e6ff6238c35727e8ef8c6967f8373e