lazada-seller-profile-scraper
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated scraping purpose is plausible, but the skill overreaches by auto-installing a separate skill/CLI and delegating broad browser/session access to external BrowserAct tooling. The install source looks same-org and not overtly malicious, so this is not confirmed malware, but the transitive-install and autonomous dependency behavior make it higher-risk than a normal marketplace scraper.
Confidence: 84%Severity: 72%
Audit Metadata