zenrows
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's stated ZenRows purpose is plausible, and the install path uses an official npm package rather than a hidden payload. But the core integration is not direct ZenRows access; it routes authentication and API operations through an unrelated third-party broker (Membrane), creating a trust and data-flow mismatch that is disproportionate to a simple vendor integration. No confirmed malware signals were found.
Confidence: 87%Severity: 56%
Audit Metadata