skills/skillatlas/skills/scrapesocial-tiktok/Socket

scrapesocial-tiktok

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the actual install path is not internally consistent with the claimed ScrapeCreators integration. The skill directs users to install and trust a differently named npm CLI, then provide a ScrapeCreators API key to it, creating a high-risk supply-chain and credential exposure scenario.

Confidence: 93%Severity: 84%

Audit Metadata

Analyzed At

Oct 2, 2026, 12:57 PM

Package URL

pkg:socket/skills-sh/skillatlas%2Fskills%2Fscrapesocial-tiktok%2F@4c99a3e4a4b0e794fda4ed00c183ea5e36da18df1a0d546479e68cb370782b80