redfin-real-estate

Fail

Audited by Socket on Feb 13, 2026

2 alerts found:

MalwareurlStrings
MalwareHIGH
SKILL.md

[Skill Scanner] Installation of third-party script detected Based on the documentation provided (no actual scraper code included), this skill is consistent with its stated purpose: a web scraper for Redfin using Selenium, BeautifulSoup and pandas. There are no indicators of intentional malicious behavior in the documentation: no credential-harvesting endpoints, no obfuscated payloads, and no third-party data-forwarding described. Primary risks are non-malicious but important: it violates Redfin's ToS, can trigger rate-limiting or IP bans, and could accidentally expose local browser session data if Selenium uses a real profile. Operational caution is advised (isolate browser profile, respect rate limits, and consider legal/ToS implications). LLM verification: The skill is coherent with its stated purpose ( Redfin data retrieval via web scraping ), but faces several non-technical risks: ToS/policy compliance, unpinned dependencies, and potential third-party script usage. No credentials or exfiltration detected in the fragment. Recommend pinning dependencies, validating any third-party components, implementing basic error handling for anti-scraping blocks, and ensuring compliance before deployment.

Confidence: 95%Severity: 90%
urlStringsLOW
Audit Metadata
Analyzed At
Feb 13, 2026, 11:51 PM
Package URL
pkg:socket/skills-sh/rms1000watt%2Fskills%2Fredfin-real-estate%2F@f8db07f2ae9c39768b5b2e0a05bb6224fc73b2f6