yelp-search
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The core Yelp API functionality is coherent and mostly benign, but the optional review-extraction paths materially broaden the skill’s footprint. Using browser automation, DuckDuckGo workarounds, and Browserbase proxies to bypass Yelp scraping controls is disproportionate to a simple business-search skill and introduces medium risk, though there is no clear evidence of malware or credential theft.
Confidence: 87%Severity: 56%
Audit Metadata