temu-search-results-scraper

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated scraping purpose is coherent, but the skill’s actual footprint depends on transitive installation of the BrowserAct skill and CLI, with automatic no-confirmation install and dynamic runtime instructions fetched from that external tool. Data collection scope is broadly aligned with e-commerce scraping, and the dependency appears same-project and PyPI-backed rather than clearly malicious, but the transitive trust chain and delegated browser runtime make this higher risk than a simple scraper skill.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:55 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Ftemu-search-results-scraper%2F@dd4ca6ad0e002aef42e2c35a9b1e0ce7b2150a5b67433c8916fa76dc006ac88c