lightpanda-browser

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The browsing and automation capabilities broadly match the stated purpose, but the install trust is a major problem: the main install path uses an unverified personal GitHub raw script instead of an official same-org distribution path. Combined with arbitrary web-content processing, eval support, and credential/session handling, the skill presents high security risk even though it is not confirmed malware.

Confidence: 84%Severity: 81%
Audit Metadata
Analyzed At
Mar 20, 2026, 02:20 PM
Package URL
pkg:socket/skills-sh/Mathews-Tom%2Fpraxis-skills%2Flightpanda-browser%2F@e96186456916b2f6c4b7740fa06af28712d07bec