skills/sam6dvpte34/lead-generation-skill/tiktok-follower-lead-scraper/Socket

tiktok-follower-lead-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated lead-scraping purpose is coherent, but the skill’s footprint is enlarged by automatic transitive installation of BrowserAct and delegated browser automation. Main risks are supply-chain trust, autonomous dependency installation, and exposing browsing/session context to third-party tooling rather than direct malicious exfiltration.

Confidence: 86%Severity: 68%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:36 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Ftiktok-follower-lead-scraper%2F@88d002a4566a86c42678316b7467ff6b008720fda3ddf2924fa83e19c70d94cb