tiktok-shop-live-product-reference-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated scraping purpose is plausible, but the skill’s footprint is enlarged by automatic transitive skill installation, delegated dynamic instructions, and no-confirmation dependency setup. The main concern is trust expansion and autonomous installation behavior, not confirmed malware or direct credential theft.

Confidence: 83%Severity: 74%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:28 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Ftiktok-shop-live-product-reference-scraper%2F@db7ee5eb0eb9e17f4c91846065092e32a4ddb7230c5da6810d527641e5f57a46
Security Audit — socket — tiktok-shop-live-product-reference-scraper