flirt4free-downloader

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The stated capability mostly matches the advertised purpose, but the install model is the main concern: users are told to install a proprietary, unverifiable browser extension build from GitHub Releases. With no code, checksums, or clear permission/data-flow details, this is best classified as suspicious/high-risk supply-chain exposure rather than confirmed malware.

Confidence: 81%Severity: 78%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:14 PM
Package URL
pkg:socket/skills-sh/serpdownloaders%2Fskills%2Fflirt4free-downloader%2F@aa84453b410c36d32908723c546752c88f34beeb