shopify-storefront-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the storefront-scraping purpose is legitimate and mostly aligned, but the skill’s footprint is broadened by mandatory delegation to BrowserAct and automatic transitive installation without user confirmation. Main concerns are transitive trust, medium supply-chain risk, and autonomous dependency installation rather than clear malware or credential theft.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:35 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fshopify-storefront-scraper%2F@ed9c22daa67ccc94ec2fd98ac048a6b06db62f9da0f4c89f7ae7be908b7feb4c
Security Audit — socket — shopify-storefront-scraper