scrapesocial-youtube

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated YouTube research purpose is plausible, but the install and credential flow are not internally consistent. The skill mixes Scrape Creators branding and API keys with a different CLI/package name (scrapesocial), creating a high supply-chain and credential-forwarding risk even though the research workflow itself is normal.

Confidence: 94%Severity: 84%
Audit Metadata
Analyzed At
Oct 2, 2026, 12:56 PM
Package URL
pkg:socket/skills-sh/skillatlas%2Fskills%2Fscrapesocial-youtube%2F@66529deba87eaa4a34e215702ac08e520684efcf498383cdc2bfdea2a6bf86fa