recruiter-profile-lead-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches lead scraping, but the skill’s real footprint is dominated by automatic transitive installation and delegation to third-party BrowserAct tooling. BrowserAct appears to be an official project with package-registry distribution, which lowers malware confidence, but the auto-install behavior and externalized browser runtime create substantial trust and data-flow risk disproportionate to a simple scraper wrapper.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:41 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Frecruiter-profile-lead-scraper%2F@168ae60af490cfab5930cede00092586f3e0d6abd6ad5e3c482993df95e0ed86
Security Audit — socket — recruiter-profile-lead-scraper