get-qualified-leads-from-luma

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is mostly coherent with its lead-generation purpose and uses official Slack/Rube channels, but it forwards credentials to external services, depends on an unseen scraper/Apify-backed component with incomplete provenance, and chains external-content processing with file/output actions. This looks more like a high-risk automation workflow than confirmed malware.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:17 PM
Package URL
pkg:socket/skills-sh/nikiandr%2Fgoose-skills%2Fget-qualified-leads-from-luma%2F@859b9a71689fc316e30829f9ac5d7bcaa3123ce3