expansion-signal-spotter

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core purpose is coherent, but the skill’s optional LinkedIn/job-monitoring path is under-specified and likely depends on unverifiable third-party scraping services that may receive customer/contact data and possibly LinkedIn session credentials. With no official install/provenance details for those tools, the skill carries high supply-chain and credential-forwarding risk despite otherwise plausible sales-ops functionality.

Confidence: 81%Severity: 82%
Audit Metadata
Analyzed At
Mar 14, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Fexpansion-signal-spotter%2F@e0b976f81de1deee05bff2dfd4c54560c5c1e253