facebook-post-lead-scraper

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches lead scraping, but the skill expands trust by auto-installing and invoking an external BrowserAct skill/CLI without separate approval. The install path appears same-org and officially documented, which reduces concern versus malware, yet the transitive dependency and likely vendor-mediated browser data flow make the footprint broader than a simple scraping instruction.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Oct 12, 2026, 05:28 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Ffacebook-post-lead-scraper%2F@cfad28241408f289b32a4d095a510db99f9929fcc3d4a093cf191964e815c3c9