lazada-category-listing-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose is coherent for ecommerce scraping, but the skill’s footprint is enlarged by mandatory BrowserAct dependency installation, transitive skill loading, and autonomous install behavior without user confirmation. The install sources appear plausibly same-org and documented, so this is not confirmed malware, but it is medium-high risk due to delegated runtime trust and automatic dependency actions.

Confidence: 87%Severity: 74%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:18 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Flazada-category-listing-scraper%2F@d9bf969316a8e1709f124abe2b55f73441d5b0078e4bd97e29257388b11c3842
Security Audit — socket — lazada-category-listing-scraper