yelp-business-review-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The scraping purpose broadly matches the browser-based capability, and the BrowserAct dependency appears plausibly official. The main concern is that the skill tells the agent to automatically install another Skill and CLI without separate approval, creating transitive trust and moderate execution risk.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:36 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fyelp-business-review-scraper%2F@92bebdb23e70feabc8dd6d361f745ed3cda0937de36b6322fe9e29aba08ad66a
Security Audit — socket — yelp-business-review-scraper