ecommerce-shipping-fee-scraper

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose matches the capability of browser-based ecommerce scraping, and the install path appears same-brand and documentation-consistent rather than overtly malicious. However, the skill auto-installs a separate skill/CLI without separate approval and relies on dynamically fetched BrowserAct runtime behavior, creating a medium supply-chain and transitive-trust risk disproportionate to a simple scraping helper.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Sep 19, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fecommerce-shipping-fee-scraper%2F@8a1136ff4542558d15f0475ef2c66f508bd959a12702a04ab0cbb6075882ad97