yelp-search

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The core Yelp API functionality is coherent and mostly benign, but the optional review-extraction paths materially broaden the skill’s footprint. Using browser automation, DuckDuckGo workarounds, and Browserbase proxies to bypass Yelp scraping controls is disproportionate to a simple business-search skill and introduces medium risk, though there is no clear evidence of malware or credential theft.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Sep 14, 2026, 07:47 PM
Package URL
pkg:socket/skills-sh/letta-ai%2Fskills%2Fyelp-search%2F@d12615e477db800b69ff6f511fac608a703661df65381ac81c2171b7ea5b929b
Security Audit — socket — yelp-search