mercadolibre-seller-profile-scraper
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose is coherent with browser automation for seller research, and the install path appears same-org official via BrowserAct GitHub/docs/PyPI rather than a random payload. However, the skill requires automatic installation of a separate skill/CLI without user confirmation and delegates execution to dynamically fetched BrowserAct instructions, creating meaningful transitive supply-chain and trust risk disproportionate to a simple marketplace scraper.
Confidence: 88%Severity: 58%
Audit Metadata