camofox-on-replit
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill’s behavior is largely coherent with its stated purpose: it provisions and runs an anti-detection Firefox scraping server locally. Main risk comes from download-and-execute supply-chain steps and the nature of anti-bot bypass automation, not from clear credential theft or covert exfiltration. Overall this is better classified as suspicious/high-utility scraping infrastructure with moderate security risk, not confirmed malware.
Confidence: 82%Severity: 58%
Audit Metadata