shopify-storefront-scraper
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the storefront-scraping purpose is legitimate and mostly aligned, but the skill’s footprint is broadened by mandatory delegation to BrowserAct and automatic transitive installation without user confirmation. Main concerns are transitive trust, medium supply-chain risk, and autonomous dependency installation rather than clear malware or credential theft.
Confidence: 84%Severity: 74%
Audit Metadata