skills/sam6dvpte34/lead-generation-skill/linkedin-title-search-scraper/Socket

linkedin-title-search-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated lead-scraping purpose is coherent, but the skill expands trust by auto-installing and invoking a separate BrowserAct skill/CLI without user confirmation. The main risk is transitive dependency trust and broad external browser-runtime data handling, not confirmed malware.

Confidence: 87%Severity: 71%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:29 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Flinkedin-title-search-scraper%2F@4068b3c61376d7f118b57548d29c9e39c6e5568a4b51b09c948ea9a7041aefc9