amazon-bestseller-ranking-scraper
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s core scraping purpose is plausible, but it is internally inconsistent because a bestseller-ranking scraper is framed mostly as seller/supplier profile research and it delegates execution to a transitive BrowserAct skill/CLI with automatic installation. The install sources appear official and same-org, which lowers malware concern, but autonomous dependency installation plus runtime opacity and live-web prompt-injection exposure make this a medium-risk skill.
Confidence: 84%Severity: 58%
Audit Metadata