aliexpress-listings-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated scraping purpose is plausible, but the skill’s footprint is broader than a simple listing collector because it auto-installs a transitive browser-automation dependency without separate approval and relies on dynamically served runtime content. No clear credential theft or exfiltration is shown here, but the trust chain and autonomous install behavior make it medium risk.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:46 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Faliexpress-listings-scraper%2F@b5616ff4649b6df429131614c4ca52554047601a9d70a66bd57e195f17f9017f
Security Audit — socket — aliexpress-listings-scraper