etsy-keyword-research

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated Etsy research purpose is plausible, but the actual footprint is broader because it auto-installs and relies on a separate BrowserAct skill and CLI, creating transitive trust and autonomous system changes. Data collection is mostly aligned with scraping, yet the dependency chain and no-confirmation installation behavior make the skill medium-to-high risk even without clear evidence of outright malware.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:37 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fetsy-keyword-research%2F@6cf25039135a49d6e62fea89d3acdf741a462b478b77e5fa417892dedfc94cc5
Security Audit — socket — etsy-keyword-research