notte-browser

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is largely coherent with its stated purpose and uses official Notte infrastructure, so it is not overtly malicious. However, it has a broad and high-impact footprint—credential handling, browser/profile sync, file transfer, scheduled remote automations, HTTP-callable functions, scraping of untrusted content, and payment flows—plus transitive skill installation. This makes it a medium/high-risk automation skill even though the install provenance appears legitimate.

Confidence: 91%Severity: 69%
Audit Metadata
Analyzed At
Oct 14, 2026, 09:25 AM
Package URL
pkg:socket/skills-sh/nottelabs%2Fnotte-skills%2Fnotte-browser%2F@6b798a08c35e8caace4238a43e4e5839c167d5adbf9f77c4be2363c55d3e0d64