website-press-page-lead-scraper

Warn

Audited by Socket on Jul 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose is coherent, but the skill expands trust by auto-installing a separate skill/CLI and may route browsing/session data through external BrowserAct tooling. No confirmed malware or overt credential theft is shown, yet the transitive install, no-confirmation dependency installation, and possible cookie/session reuse make the footprint disproportionate for a simple press-page scraper.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
Jul 20, 2026, 04:51 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Flead-generation-skill%2Fwebsite-press-page-lead-scraper%2F@b0e9c6102cbdadc89f09af1df3db4097d0da386fe4e51349f6b2efb4d4729026
Security Audit — socket — website-press-page-lead-scraper