trawl

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Security
SecurityMEDIUM
reference/anti-detection-architecture.md

No classic malware is shown because there is no executable code here. However, the fragment is explicitly an anti-detection/evasion playbook for automated crawling that targets bot-protection systems (proxy/IP rotation, UA/TLS fingerprint impersonation, timing/behavior randomization, and challenge-driven retry/rotation) including Cloudflare-aware bypass considerations. If this guidance is implemented in a dependency, it would meaningfully enable bypass of access controls and non-compliant scraping; treat as high-risk for misuse and require strong authorization/compliance controls before use.

Confidence: 67%Severity: 79%
Audit Metadata
Analyzed At
Aug 13, 2026, 09:28 AM
Package URL
pkg:socket/skills-sh/simota%2Fagent-skills%2Ftrawl%2F@e934e310e37c98675a5a3f8732da9d838c000c77fd90a7a425929babe999c6bc
Security Audit — socket — trawl