instagram-follower-lead-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Purpose and capabilities are broadly aligned with lead scraping, but the skill is risky because it mandates third-party BrowserAct dependencies, installs another skill automatically, and authorizes dependency installation without user confirmation. This looks suspicious from an agent-safety standpoint, not malicious: the main concerns are transitive trust, external runtime execution, and autonomous system changes.

Confidence: 84%Severity: 61%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:30 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Finstagram-follower-lead-scraper%2F@6a1c5058ccdc7fb2dcd8529e2790dbafdae410c48c2bd0b26e4f8ec88a9238eb
Security Audit — socket — instagram-follower-lead-scraper