ecommerce-product-feed-audit
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent for ecommerce feed auditing, but the skill's footprint is broadened by automatic installation of a separate BrowserAct skill and external CLI, plus live processing of untrusted web content. Provenance for BrowserAct appears plausibly same-org and official, so this is not confirmed malware, but the transitive install and no-approval runtime behavior make the skill medium-high risk.
Confidence: 85%Severity: 68%
Audit Metadata