redfin-real-estate
Audited by Socket on Feb 13, 2026
2 alerts found:
MalwareurlStrings[Skill Scanner] Installation of third-party script detected Based on the documentation provided (no actual scraper code included), this skill is consistent with its stated purpose: a web scraper for Redfin using Selenium, BeautifulSoup and pandas. There are no indicators of intentional malicious behavior in the documentation: no credential-harvesting endpoints, no obfuscated payloads, and no third-party data-forwarding described. Primary risks are non-malicious but important: it violates Redfin's ToS, can trigger rate-limiting or IP bans, and could accidentally expose local browser session data if Selenium uses a real profile. Operational caution is advised (isolate browser profile, respect rate limits, and consider legal/ToS implications). LLM verification: The skill is coherent with its stated purpose ( Redfin data retrieval via web scraping ), but faces several non-technical risks: ToS/policy compliance, unpinned dependencies, and potential third-party script usage. No credentials or exfiltration detected in the fragment. Recommend pinning dependencies, validating any third-party components, implementing basic error handling for anti-scraping blocks, and ensuring compliance before deployment.