web-scraper-data-miner

Warn

Audited by Socket on Apr 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated scraping purpose is plausible, but the footprint is broader than necessary because it allows generic shell execution and references an unidentified `crawl_tool`. The biggest concerns are unverifiable tool provenance and indirect prompt-injection risk from processing arbitrary web content with exec capability; there is no clear evidence of credential theft or malicious exfiltration.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Apr 18, 2026, 05:41 PM
Package URL
pkg:socket/skills-sh/adryanmoldokkr32-pixel%2Fbionicbot-backend-skills%2Fweb-scraper-data-miner%2F@8a7ac614e53cea046edb007c3dd05e755b51b0e6
Security Audit — socket — web-scraper-data-miner