allegro-search-results-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the scraping purpose is coherent, and the BrowserAct install path appears officially documented, but the skill expands trust to a separate powerful browser-automation skill/CLI and authorizes automatic transitive installation without separate user approval. This is not confirmed malware, but it is a medium-high security risk due to delegated runtime power and transitive trust.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:49 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fallegro-search-results-scraper%2F@3cd2236f03868639cb6065aba3961655ff16bce2407b7cd56524e120ee88cab1
Security Audit — socket — allegro-search-results-scraper