linkedin-people-search-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches lead-generation scraping, but the skill expands trust by auto-installing a third-party skill/CLI without confirmation and potentially reusing browser cookies/session state. The BrowserAct dependency appears official and not overtly malicious, yet the transitive install chain, autonomous dependency loading, and credential/session exposure make the overall skill medium-high risk.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:20 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Flinkedin-people-search-scraper%2F@ba3e872896872aa2075c4e2a8a812087d7d936779673d5efdf106906e791f08a
Security Audit — socket — linkedin-people-search-scraper