skills/sam6dvpte34/ecommerce-skill/shopify-price-availability-monitor/Socket

shopify-price-availability-monitor

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core monitoring purpose is coherent, and the BrowserAct dependency appears same-org and officially documented, but the skill materially increases risk by auto-installing a separate Skill/CLI without user confirmation. The main concern is transitive trust and autonomous dependency installation rather than confirmed malware.

Confidence: 88%Severity: 71%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:32 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fshopify-price-availability-monitor%2F@4b160b1e2c7bf7c5340d1fb1cca5cf5b3e039a05c236a57a5544dad269353851