scrapling

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is broadly aligned with its stated scraping purpose and uses largely official distribution channels, so it is not fundamentally deceptive. However, its footprint is high-risk for an agent skill because it automates anti-bot bypass, can disable TLS verification, forwards sensitive request material to arbitrary sites/proxies, and fetches untrusted web content while enabling code/file actions. This looks like a legitimate but powerful scraping skill with meaningful security risk rather than confirmed malware.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Aug 20, 2026, 08:16 PM
Package URL
pkg:socket/skills-sh/archibate%2Fdotfiles-opencode%2Fscrapling%2F@3e179fdba848df569f233b7785514e452e4fda6722e89730aeb14ee59bbcbad3