stripchat-vr-downloader

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated capability matches the purpose of a Stripchat VR downloader, but the trust model is weak: users must install a proprietary browser extension from GitHub Releases, with no checksums or store review, and grant it access to authenticated browsing sessions. I see no confirmed malicious behavior or clear exfiltration endpoint, but the binary-style extension footprint is high-risk and not independently auditable.

Confidence: 80%Severity: 82%
Audit Metadata
Analyzed At
Apr 10, 2026, 10:14 PM
Package URL
pkg:socket/skills-sh/serpdownloaders%2Fskills%2Fstripchat-vr-downloader%2F@1c68aa83177dddceaea66c35f502f62d952a4aa2