social-media-crawler

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s purpose and capabilities align around social-media scraping, but the actual footprint is high risk: it teaches an AI agent to bypass platform defenses, piggyback on a user’s authenticated Chrome session via CDP/SSH, and perform autonomous public interactions. Install sources look plausibly official for MediaCrawler, so this is not confirmed malware, but the session-access and automation scope are disproportionate and dangerous.

Confidence: 86%Severity: 82%
Audit Metadata
Analyzed At
Sep 1, 2026, 06:01 AM
Package URL
pkg:socket/skills-sh/kekewater%2Fhermes-skills%2Fsocial-media-crawler%2F@f232d6aec12cf194fd482cd571a595e9cf45eb7cb12e1bddfc1d1d0fc0d1e0b7