aws-marketplace-scraper

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core scraping purpose is plausible, and the BrowserAct dependency appears to come from official same-org sources rather than an unknown binary. However, the skill instructs automatic transitive installation of another skill/CLI without confirmation, relies on dynamic runtime instructions, and is loosely templated beyond AWS Marketplace, creating medium trust and scope concerns rather than confirmed malicious behavior.

Confidence: 85%Severity: 52%
Audit Metadata
Analyzed At
Sep 19, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Faws-marketplace-scraper%2F@eb1fc1dde96c7bb2aec69092cb45b862c495f96489ef21e3e7062791e17f2d75