avito-connector

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's marketplace-scraping purpose matches its Avito access pattern, but the fallback to a logged-in Chrome session over CDP materially broadens access and uses anti-bot circumvention. No clear off-platform exfiltration is shown, so this is not confirmed malware, but it carries meaningful session and browser-control risk.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 09:01 PM
Package URL
pkg:socket/skills-sh/vladimir-human%2Fru-marketplace-mcp%2Favito-connector%2F@7884eecf09fadadaf6c8d8aaeb7cb38421f74772d60be4dae14abc5955dbd4c7
Security Audit — socket — avito-connector