skills/creativault/skills/creator-scraper-cv/Socket

creator-scraper-cv

Warn

Audited by Socket on May 10, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

The skill is mostly aligned with its stated SaaS scraping purpose, and its credential needs are proportionate. The main security concern is the default non-TLS API endpoint, plus external OSS/webhook data flows and a user-overridable base URL; these make the skill suspicious rather than clearly malicious.

Confidence: 85%Severity: 72%

Audit Metadata

Analyzed At

May 10, 2026, 09:50 AM

Package URL

pkg:socket/skills-sh/creativault%2Fskills%2Fcreator-scraper-cv%2F@22243b076a9ca78bb145417484df865484e7f168