skills/sam6dvpte34/lead-generation-skill/tiktok-profile-lead-scraper/Socket

tiktok-profile-lead-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is coherent with lead scraping, but the skill materially expands trust by auto-installing and depending on a third-party BrowserAct skill/CLI without separate user confirmation. The main risk is transitive installation and indirect data/session handling through that runtime, not confirmed malware.

Confidence: 85%Severity: 74%

Audit Metadata

Analyzed At

Jul 20, 2026, 04:23 AM

Package URL

pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Ftiktok-profile-lead-scraper%2F@cfc7d0fb47781058640cac7888a5737497ea97b1719d58ced16bf3e95eeaba54