ecommerce-product-feed-audit

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is coherent for ecommerce feed auditing, but the skill's footprint is broadened by automatic installation of a separate BrowserAct skill and external CLI, plus live processing of untrusted web content. Provenance for BrowserAct appears plausibly same-org and official, so this is not confirmed malware, but the transitive install and no-approval runtime behavior make the skill medium-high risk.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:44 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fecommerce-product-feed-audit%2F@5366110d189f4f3ec50579ad1b1c8ed04b026c59abf738889f7e1bc5ae1c4461
Security Audit — socket — ecommerce-product-feed-audit