skills/yashas-30/nyx/apify-content-analytics/Socket

apify-content-analytics

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's purpose is coherent, and its main network endpoint and CLI are officially tied to Apify. Risk comes from direct .env token extraction, forwarding credentials through a locally installed CLI, unpinned global install, and support for third-party Actor publishers beyond Apify-owned Actors.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

Jun 23, 2026, 08:50 AM

Package URL

pkg:socket/skills-sh/yashas-30%2FNYX%2Fapify-content-analytics%2F@b7e8b73843252fd02c83b2af0efae83548bbff764f813471440cf393b871f2fc