skills/sam6dvpte34/lead-generation-skill/google-search-domain-lead-finder/Socket

google-search-domain-lead-finder

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated lead-finding purpose is plausible, but the skill is mostly a thin wrapper that automatically installs and delegates to a third-party BrowserAct Skill/CLI. Same-org install evidence lowers malware concern, yet transitive trust, auto-install without confirmation, and web-content handling make the overall security posture medium risk.

Confidence: 84%Severity: 66%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:18 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Fgoogle-search-domain-lead-finder%2F@02d345c61e6fd067f4bcfc787ce1f839e44f8a0298adb7ec19d4fb1fd34bf800