linkedin-job-search-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core browsing/scraping purpose is plausible, and the BrowserAct dependency has partial same-org trust evidence, but the skill broadens into lead-gen/contact enrichment, requires transitive dependency installation, and explicitly authorizes automatic install without user confirmation. This is not confirmed malware, but it is medium risk due to execution trust expansion and unclear BrowserAct data handling boundaries.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:39 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Flinkedin-job-search-scraper%2F@ee3fc784222d27e19c8a1b5bab42c03116bbe573fedd273184f0993dfc813721
Security Audit — socket — linkedin-job-search-scraper