ecommerce-shipping-fee-scraper
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose matches the capability of browser-based ecommerce scraping, and the install path appears same-brand and documentation-consistent rather than overtly malicious. However, the skill auto-installs a separate skill/CLI without separate approval and relies on dynamically fetched BrowserAct runtime behavior, creating a medium supply-chain and transitive-trust risk disproportionate to a simple scraping helper.
Confidence: 86%Severity: 58%
Audit Metadata