scrapedo-web-scraper

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/scrape.py

The code is a straightforward Scrape.do web-scraping client and contains no clear malware, backdoor, or intentional system-data theft. The primary security concerns are transmitting an API token over HTTP and placing it in query parameters, which can expose credentials through network monitoring and logs. Credential-file access is expected for this utility, but the endpoint should use HTTPS and token handling should avoid URL query exposure where possible. The fragment also appears syntactically incomplete.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:20 PM
Package URL
pkg:socket/skills-sh/artwist-polyakov%2Fpolyakov-claude-skills%2Fscrapedo-web-scraper%2F@acd973e00bf4afd19f053e206f6dbe81adee6bfddfa4d943eaff2a9ec622089f