scrape

Warn

Audited by Socket on Aug 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the job-search purpose is coherent, and there is no clear credential theft or malicious exfiltration. The main issue is transitive execution trust: this skill automatically discovers and runs arbitrary local portal skills via Bun from wildcard paths, so its safety depends on separately installed skills not reviewed here. That makes the overall security risk medium-high despite otherwise proportionate data flows.

Confidence: 87%Severity: 76%
Audit Metadata
Analyzed At
Aug 19, 2026, 07:21 PM
Package URL
pkg:socket/skills-sh/madslorentzen%2Fai-job-search%2Fscrape%2F@4e2f1dbf9e8e6d39f82f52c33d2e906acf7ffc89ba5cf433a00943d770c1b718
Security Audit — socket — scrape