competitor-landing-page-intent-monitor

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill is broader than necessary because it auto-installs a transitive BrowserAct dependency and relies on remotely fetched runtime content without separate user approval. Provenance appears same-org and not overtly malicious, so this is not confirmed malware; the main issues are supply-chain trust, transitive installation, and live web-content execution risk.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:33 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Fcompetitor-landing-page-intent-monitor%2F@e964d8866859cceb139d5daf3191c13f63f39d57fb611e9a3966c90b1bb0e813
Security Audit — socket — competitor-landing-page-intent-monitor