ecommerce-seller-profile-scraper
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated scraping purpose is plausible, but the skill expands scope by auto-installing a second skill and an external browser CLI, then delegating live browsing that may use cookies or API keys. Same-brand docs and PyPI distribution reduce the chance of outright malware, but transitive installation, no-approval runtime setup, and credential/session handling make the overall footprint broader than a simple profile scraper.
Confidence: 83%Severity: 62%
Audit Metadata