decodo-scraper

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill is coherent with its stated purpose: it orchestrates web search/scraping via the Decodo API and returns structured results in appropriate formats. The footprint is proportionate to a legitimate scraping helper. The primary security concern is handling of the DECODO_AUTH_TOKEN (sensitive credential) and ensuring outputs do not leak secrets or tokens. No obvious malicious data exfiltration or supply-chain patterns are evident from the provided description, but token handling should be audited and logs sanitized.

Confidence: 98%Severity: 40%
Audit Metadata
Analyzed At
Mar 10, 2026, 10:08 PM
Package URL
pkg:socket/skills-sh/decodo%2Fdecodo-openclaw-skill%2Fdecodo-scraper%2F@61e6687c4e4c599be64e00ea08c06a9902e353da