scrapesocial-youtube
Warn
Audited by Socket on Oct 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the stated YouTube research purpose is plausible, but the install and credential flow are not internally consistent. The skill mixes Scrape Creators branding and API keys with a different CLI/package name (scrapesocial), creating a high supply-chain and credential-forwarding risk even though the research workflow itself is normal.
Confidence: 94%Severity: 84%
Audit Metadata