01-intake

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The public-website audit purpose is mostly coherent, but the skill materially expands into third-party LinkedIn scraping and credential/session forwarding. Its highest risk is sending a `li_at` LinkedIn session cookie to community Apify actors, plus transitive trust in other skills and hosted scrapers. Not confirmed malware, but high security risk and disproportionate data handling for a company-intake skill.

Confidence: 90%Severity: 86%
Audit Metadata
Analyzed At
Jul 21, 2026, 11:12 AM
Package URL
pkg:socket/skills-sh/victor-shulga%2Fgtm-strategy-skills%2F01-intake%2F@21730796f097fe94b22638d76796f4f320011abd0ca5f4ab6b491f2b38aca774