01-intake
Warn
Audited by Socket on Jul 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The public-website audit purpose is mostly coherent, but the skill materially expands into third-party LinkedIn scraping and credential/session forwarding. Its highest risk is sending a `li_at` LinkedIn session cookie to community Apify actors, plus transitive trust in other skills and hosted scrapers. Not confirmed malware, but high security risk and disproportionate data handling for a company-intake skill.
Confidence: 90%Severity: 86%
Audit Metadata