skills/sam6dvpte34/lead-generation-skill/email-address-extractor/Socket

email-address-extractor

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it offloads its core behavior to an external BrowserAct skill/CLI and instructs automatic transitive installation without user confirmation. Same-org evidence makes this look more like elevated trust and prompt-injection/supply-chain risk than confirmed malware.

Confidence: 87%Severity: 64%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:41 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Femail-address-extractor%2F@64dea62c51c48c2e816adc85ee912b5b713938a35b7f35c0282aea4e1f9b91d5