scrapesocial-facebook

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose is plausible, and the credential domain matches the claimed vendor, but its actual execution path is inconsistent with the vendor's documented CLI. Because it asks users to install an apparently different package and then provide a Scrape Creators API key, the install trust and credential-forwarding posture are not internally coherent.

Confidence: 91%Severity: 78%
Audit Metadata
Analyzed At
Sep 23, 2026, 11:56 AM
Package URL
pkg:socket/skills-sh/skillatlas%2Fskills%2Fscrapesocial-facebook%2F@102c15d2b3bee159c1837e0e099a111fe7c15ba70429ff3e67779f5b7f60ef5e