ecommerce-seller-profile-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated scraping purpose is plausible, but the skill expands scope by auto-installing a second skill and an external browser CLI, then delegating live browsing that may use cookies or API keys. Same-brand docs and PyPI distribution reduce the chance of outright malware, but transitive installation, no-approval runtime setup, and credential/session handling make the overall footprint broader than a simple profile scraper.

Confidence: 83%Severity: 62%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:24 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fecommerce-seller-profile-scraper%2F@d2170e137e8c975ce1f3b800c6a723f98d3ea670b733a00b64818fcca651871d
Security Audit — socket — ecommerce-seller-profile-scraper