trustpilot-review-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for review scraping, but the skill's footprint is enlarged by automatic transitive installation of another skill and reliance on an external browser automation CLI. BrowserAct shows some same-org legitimacy via BrowserAct docs, GitHub, and PyPI, so this is not confirmed malware; however, auto-installing dependencies without user confirmation and delegating execution to a broad browser tool create meaningful supply-chain and autonomy risk.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:44 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Ftrustpilot-review-scraper%2F@44e026925d60e6fa1eb05dc1136729bb7ff624c390386838b2f6e493caa8ff8c
Security Audit — socket — trustpilot-review-scraper