profile-website-bot-detection

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/test-kernel-bot-detection.ts

The fragment is consistent with a bot-detection vendor analysis and reporting utility, not an apparent malware payload. No explicit credential theft, malicious network exfiltration, shell execution, persistence, or destructive behavior is shown. However, it collects and persists sensitive browser telemetry, including potentially authenticated headers, cookie values, CDP/live-view URLs, and login-page screenshots. Reports and output directories should be access-controlled, sensitive headers/cookies should be redacted, and remote session URLs should not be logged or serialized unless required. The assessment is limited to the supplied fragment.

Confidence: 96%Severity: 57%
Audit Metadata
Analyzed At
Sep 16, 2026, 06:03 AM
Package URL
pkg:socket/skills-sh/kernel%2Fskills%2Fprofile-website-bot-detection%2F@36a877c52c54b047cbb88e0668dd8d4ea8dda8ba199c6e9ef83d96af49572288