alibaba-listings-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated scraping purpose is coherent, but the skill’s real footprint depends on automatic installation and delegation to BrowserAct/browser-act at runtime. The main risk is transitive trust and reduced approval boundaries, not confirmed malware or explicit credential theft.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:48 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Falibaba-listings-scraper%2F@edab8b99825a50e431ca3bc336a0593ad7c2c70a07a5ff577fd3ae93cca4f51a
Security Audit — socket — alibaba-listings-scraper