skills/sam6dvpte34/ecommerce-skill/temu-product-scraper/Socket

temu-product-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated scraping purpose is coherent, but the skill’s real footprint relies on a transitive external BrowserAct skill/CLI and instructs automatic dependency installation without user confirmation. The main risk is delegated execution and trust expansion, not confirmed malicious exfiltration.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:22 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Ftemu-product-scraper%2F@b714ca6f0e5bbcd36de340bdc88c7e8e2b4f005373a73c3f67f369d54a95a9b6