skills/sam6dvpte34/lead-generation-skill/google-search-local-service-lead-search/Socket

google-search-local-service-lead-search

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated lead-search purpose is plausible, but the skill delegates core behavior to a separate BrowserAct skill/CLI and instructs automatic dependency installation without user confirmation. The main risk is transitive trust and autonomous installation of third-party browser automation, not confirmed malware.

Confidence: 89%Severity: 72%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:16 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Fgoogle-search-local-service-lead-search%2F@916934acef5a271222ec262b53619e3ab8a2599bd494f155c4792aef8ad03c1d