chrome-devtools

Fail

Audited by Socket on Feb 26, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

BENIGN: The skill's footprint is coherent with its stated purpose of Puppeteer-based browser automation with JSON outputs. Installation and execution flow rely on standard tooling (npm, Puppeteer) and common Linux/macOS/Windows patterns. Data flows (inputs to JSON outputs) are appropriate for an automation tool; no hardcoded secrets, no suspicious external data sinks, and no evident credential harvesting or autonomous real-world actions beyond automated browser interactions. Some risk remains around legitimate-use concerns (web scraping and automation can violate site terms or privacy expectations) and the dependency-download chain, but nothing in the fragment indicates malicious intent or supply-chain abuse.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 26, 2026, 11:18 PM
Package URL
pkg:socket/skills-sh/samhvw8%2Fdotfiles%2Fchrome-devtools%2F@3963cdb87e7775b45cd4c0dac63a26177b38db35