lightpanda-browser

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The browsing/scraping capabilities fit the stated purpose, and most commands/scripts are coherent documentation for browser automation. The main issue is install trust: the skill recommends executing a personal-repo installer script that does not match the project's official same-org installation path, creating a substantial supply-chain risk for a skill that can later handle session state and credentials.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Sep 17, 2026, 09:10 AM
Package URL
pkg:socket/skills-sh/mathews-tom%2Farmory%2Flightpanda-browser%2F@4ccb7371c47f51f86ae17ecdf280a71065415dcc96291ca82b5db41db350ca25