yelp-search

Warn

Audited by Socket on Apr 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The primary Yelp API integration is coherent and mostly benign, but the optional review features materially expand trust and data-flow scope by adding browser-use, Playwright, DuckDuckGo scraping workarounds, and Browserbase proxy automation. That makes the skill riskier than its core purpose suggests, mainly due to third-party credential forwarding and scraping-oriented dependencies rather than confirmed malicious behavior.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Apr 22, 2026, 11:29 PM
Package URL
pkg:socket/skills-sh/letta-ai%2Fskills%2Fyelp-search%2F@4c8d513f42c7686c987db5b2d87986cd7de1fb73