web-scraper
Fail
Audited by Socket on Feb 13, 2026
3 alerts found:
filesystemAccessMalwarenetworkAccessfilesystemAccess
LOWfilesystemAccessLOW
MalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
This skill/documentation describes a legitimate lightweight web-scraper whose declared capabilities match its purpose. There are no direct indicators of malware, hidden exfiltration, third-party proxying, or hardcoded secrets. The main security concerns are misuse risks: ignoring robots.txt, large recursive crawls that could cause excessive load or collect sensitive-but-public data, and potential implementation-level issues (not visible here) like path traversal or unbounded disk usage. On the provided information, the package appears benign for intended use but carries moderate abuse risk if misconfigured or used irresponsibly.
Confidence: 80%Severity: 35%
networkAccessscripts/scrape.py
MEDIUMnetworkAccessMEDIUM
scripts/scrape.py
Audit Metadata