trustpilot-review-scraper
Warn
Audited by Socket on Jul 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent for review scraping, but the skill's footprint is enlarged by automatic transitive installation of another skill and reliance on an external browser automation CLI. BrowserAct shows some same-org legitimacy via BrowserAct docs, GitHub, and PyPI, so this is not confirmed malware; however, auto-installing dependencies without user confirmation and delegating execution to a broad browser tool create meaningful supply-chain and autonomy risk.
Confidence: 86%Severity: 68%
Audit Metadata