social-scraping

Warn

Audited by Socket on Apr 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s scraping behavior matches its stated purpose, but its data flow is mediated through StableSocial/AgentCash rather than official platform APIs, and it enables paid, broad social-data collection through third-party infrastructure. No strong malware indicators or hidden execution were found, but the intermediary routing and autonomous paid collection create meaningful security and privacy risk.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 7, 2026, 09:47 PM
Package URL
pkg:socket/skills-sh/merit-systems%2Fagentcash-skills%2Fsocial-scraping%2F@563b1af0bdd885e22441db88d7f15d04b9febbbc