skills/notegpt-official/notegpt-skills/browser-automation/Socket

browser-automation

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is internally consistent, but its purpose is explicit anti-bot evasion and CAPTCHA bypass. Supply-chain trust is better than average due to same-org public packages and signed releases, yet the skill still downloads and runs a patched browser binary and gives an agent high-risk web automation capability over arbitrary sites.

Confidence: 88%Severity: 82%

Audit Metadata

Analyzed At

Aug 3, 2026, 02:44 AM

Package URL

pkg:socket/skills-sh/notegpt-official%2Fnotegpt-skills%2Fbrowser-automation%2F@a9b7ae6b898c1eed5bda35a6ad04d50a5a30a5cb24c3dc5f3d6bce6308543a99