openwebninja_universal_scraper

Warn

Audited by Socket on Mar 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The core scraping purpose is plausible, but the skill’s footprint is broader than necessary. The main risks are disproportionate credential scope and multiple outbound export channels, including arbitrary webhooks and FTP/S3 uploads, plus optional RapidAPI intermediary routing. I do not see confirmed malware or deceptive install behavior, but the data-flow surface is large enough to treat this as a medium-high risk skill.

Confidence: 89%Severity: 76%
Audit Metadata
Analyzed At
Mar 30, 2026, 07:57 PM
Package URL
pkg:socket/skills-sh/OpenWeb-Ninja%2Fopenwebninja-skills%2Fopenwebninja-universal-scraper%2F@4c0fd70f6cd9cffa96f0196ae8edcdfd32bff3c9