decodo-scraper
Fail
Audited by Socket on Mar 10, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
The skill is coherent with its stated purpose: it orchestrates web search/scraping via the Decodo API and returns structured results in appropriate formats. The footprint is proportionate to a legitimate scraping helper. The primary security concern is handling of the DECODO_AUTH_TOKEN (sensitive credential) and ensuring outputs do not leak secrets or tokens. No obvious malicious data exfiltration or supply-chain patterns are evident from the provided description, but token handling should be audited and logs sanitized.
Confidence: 98%Severity: 40%
Audit Metadata