skills/monotykamary/browser-harness-js/ttdl/Socket

ttdl

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's behavior largely matches its stated TikTok-download purpose and shows no clear credential theft or exfiltration, but it relies on powerful browser-debugging access and an externally provided browser-harness-js/cdp skill chain with weaker install provenance than standard packaged tooling. Main concern is supply-chain and transitive trust, not confirmed malware.

Confidence: 83%Severity: 62%

Audit Metadata

Analyzed At

Jul 17, 2026, 04:47 PM

Package URL

pkg:socket/skills-sh/monotykamary%2Fbrowser-harness-js%2Fttdl%2F@23f1c9912e992fd0086fc95cb9e96fcc8b0ef68e9c8c4c24f6ff731f908b670b