g2-company-lead-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated lead-scraping purpose is plausible, but the skill’s footprint relies on automatic transitive installation of a third-party browser automation skill/CLI from a different publisher. The data flow is mostly consistent with scraping, yet the no-confirmation install behavior and extended trust chain make it medium-to-high risk rather than benign.

Confidence: 85%Severity: 68%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:38 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Fg2-company-lead-scraper%2F@d0817537934ec297826129efcde1db561442fe5d5258362d18696aaf5b3558ac
Security Audit — socket — g2-company-lead-scraper