Ecommerce Scraper

• Analyzed: May 11, 2026, 4:48 AM
• Findings: 1
• Version: 1.0.0
• Hash: 0b1c03e5ac771e7e15616ea52e5fe1fb34c096f5f7a2ee9fbc3c79b7195ee233
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to two main vulnerabilities: the use of `--no-sandbox` in Playwright browser launches across `scripts/api_discovery.py`, `scripts/scrape.py`, and `scripts/scrape_v2.py`, which weakens browser sandboxing protections; and the local storage of authentication cookies in plain JSON format (`data/cookies.json`) by `scripts/scrape_v2.py`, which poses a risk of credential exposure if the local system is compromised. While these are significant security flaws, there is no evidence of intentional malicious behavior such as data exfiltration to external servers or backdoor installation.