amazon-bestseller-ranking-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s core scraping purpose is plausible, but it is internally inconsistent because a bestseller-ranking scraper is framed mostly as seller/supplier profile research and it delegates execution to a transitive BrowserAct skill/CLI with automatic installation. The install sources appear official and same-org, which lowers malware concern, but autonomous dependency installation plus runtime opacity and live-web prompt-injection exposure make this a medium-risk skill.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:15 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Famazon-bestseller-ranking-scraper%2F@067b26489b12dd2b2e617578c4d6a49e78ba3ea99cc2fe7ab4491679308ec79f
Security Audit — socket — amazon-bestseller-ranking-scraper