scrapingant

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install source is mostly legitimate and same-org, so this is not strong malware evidence. However, the skill's stated purpose is ScrapingAnt access while its real footprint centers on installing and trusting Membrane as a third-party intermediary for authentication, data access, and dynamically created actions; that mismatch makes the data flow and trust model broader than a direct ScrapingAnt integration.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 30, 2026, 04:50 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fscrapingant%2F@81d97f45df349709258d8576fad5c8e24e5ab488
Security Audit — socket — scrapingant