mercadolibre-seller-profile-scraper

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is coherent with browser automation for seller research, and the install path appears same-org official via BrowserAct GitHub/docs/PyPI rather than a random payload. However, the skill requires automatic installation of a separate skill/CLI without user confirmation and delegates execution to dynamically fetched BrowserAct instructions, creating meaningful transitive supply-chain and trust risk disproportionate to a simple marketplace scraper.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Sep 19, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fmercadolibre-seller-profile-scraper%2F@d24ccebc430cb12e02a7776fcddbb3d704c1834241d2ade352a651543616456f