skills/sam6dvpte34/ecommerce-skill/zalando-product-scraper/Socket

zalando-product-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the scraping purpose matches the browser-based capability, and the BrowserAct dependency appears to use an official same-org path, but the skill's requirement to auto-install and invoke a separate Skill/CLI without user confirmation creates meaningful transitive-trust and autonomy risk.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:16 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Fecommerce-skill%2Fzalando-product-scraper%2F@dae5a4f7073c4d686ffa374f5a95025556da3ffe114729ea21dc2cf0a4834a10