yelp-search
Warn
Audited by Socket on Apr 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The primary Yelp API integration is coherent and mostly benign, but the optional review features materially expand trust and data-flow scope by adding browser-use, Playwright, DuckDuckGo scraping workarounds, and Browserbase proxy automation. That makes the skill riskier than its core purpose suggests, mainly due to third-party credential forwarding and scraping-oriented dependencies rather than confirmed malicious behavior.
Confidence: 84%Severity: 61%
Audit Metadata