facebook-groups-scrape-posts
What this skill does
Scrapes posts from a Facebook group and returns structured metadata for each post.
github/browser-act - Data Exfiltration - 5.3k stars
Threat analysis
Skill info
pkg:github/browser-act/skills@4577dc5?skill=facebook-groups-scrape-postsAssessments (2)
Data Exfiltration
Data Exfiltration via local-llm-review
scripts/scrape-posts.py
The script uses `require('DTSGInitialData').token`, `require('LSD').token`, and `require('CurrentUserInitialData').USER_ID` - these are Facebook internal tokens and user identifiers that are typicalInsecure API Usage
Insecure API Usage via local-llm-review
scripts/scrape-posts.py
The script uses a hardcoded `doc_id` for a GraphQL query (`26577462205242925`). If Facebook rotates this ID, the script may stop working or may be used to access data in unintended ways. This could beBadge
Add the Anomity scan badge for facebook-groups-scrape-posts to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of facebook-groups-scrape-posts? Report an issue or request a rescan.
