lazada-seller-profile-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated scraping purpose is plausible, but the skill overreaches by auto-installing a separate skill/CLI and delegating broad browser/session access to external BrowserAct tooling. The install source looks same-org and not overtly malicious, so this is not confirmed malware, but the transitive-install and autonomous dependency behavior make it higher-risk than a normal marketplace scraper.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:22 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Flazada-seller-profile-scraper%2F@343e85ebb9d43063a7c01c842dfe491aebbdac66653ecf3103f2a51f8c27ae78
Security Audit — socket — lazada-seller-profile-scraper