douyin-topic-scraper

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is coherent with browser automation for Douyin scraping, but the skill’s main behavior is to auto-install and invoke a separate BrowserAct skill/CLI without asking for confirmation. Because the dependency appears to be same-org and officially documented, this is not strong evidence of malware; however, the transitive installation chain and delegated runtime behavior make it higher-risk than a self-contained scraping guide.

Confidence: 90%Severity: 52%
Audit Metadata
Analyzed At
Sep 16, 2026, 02:30 AM
Package URL
pkg:socket/skills-sh/sam6dvpte34%2Fsocial-media-skill%2Fdouyin-topic-scraper%2F@4d9317758a709cdf93e6cecdb3ffaecdfbc1d904b516aad7af88b681c66661d0