aws-marketplace-scraper
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core scraping purpose is plausible, and the BrowserAct dependency appears to come from official same-org sources rather than an unknown binary. However, the skill instructs automatic transitive installation of another skill/CLI without confirmation, relies on dynamic runtime instructions, and is loosely templated beyond AWS Marketplace, creating medium trust and scope concerns rather than confirmed malicious behavior.
Confidence: 85%Severity: 52%
Audit Metadata