lazada-search-results-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated scraping purpose is coherent, but the skill’s footprint expands through mandatory BrowserAct dependency, transitive skill installation, and instructions to auto-install without separate approval. No clear credential theft or malicious exfiltration is shown, yet the delegated browser runtime and autonomous install behavior create meaningful medium risk.

Confidence: 82%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:25 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Flazada-search-results-scraper%2F@c1e5ddbeb3a0b86b60bb031086c85453d31a78e9799f21c398e773a1ac0c259a
Security Audit — socket — lazada-search-results-scraper