Skills social-media-finder-skill

📦

social-media-finder-skill

Name: social-media-finder-skill
Author: browser-act

Content revision r2 High Risk 🌐 Network access🔑 Env variables⚙️ External commands

Find Public Social Media Profiles Across Platforms

Finding a consistent public profile across many social networks takes time. This skill runs a BrowserAct workflow and returns structured profile details.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "social-media-finder-skill" from https://skillstore.io/skills/browser-act-social-media-finder-skill.md and its manifest at https://skillstore.io/api/skills/browser-act-social-media-finder-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/browser-act-social-media-finder-skill.md Signed manifest GET /api/skills/browser-act-social-media-finder-skill/manifest Signed lockfile GET /api/skills/browser-act-social-media-finder-skill/lockfile

Test it

Using "social-media-finder-skill". Find public social profiles for Acme Robotics.

Expected outcome:

LinkedIn: Acme Robotics company page, with profile URL and follower count.
Instagram: A likely official account, with profile URL and description.
X: Two possible matches that require manual verification.

Using "social-media-finder-skill". Review public profiles associated with my own name, Jordan Lee.

Expected outcome:

The workflow found several possible profiles across LinkedIn, Instagram, and TikTok. Results are possible matches and do not establish identity.

Using "social-media-finder-skill". Find official support accounts for Northwind Travel.

Expected outcome:

Likely official accounts are listed by platform with profile links, titles, and descriptions. Ambiguous or unofficial-looking matches are clearly marked.

Security Audit

High Risk

v6 • 7/23/2026 Open versioned report

Most static alerts are false positives caused by expected BrowserAct requests, environment-variable access, Markdown formatting, and API error handling. The skill does ask users to provide an API key to the agent and lacks clear safeguards for shell interpolation and privacy-sensitive searches.

Files scanned

207

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:25-39

Shell Injection Through Search Input

The agent is told to place a user-selected person or brand name into a shell invocation without validation or structured argument guidance. Shell metacharacters could execute commands if the value is interpolated into the example command.

The documentation connects a user-controlled parameter to a Bash command, but the shown value is quoted and fixed. Exploitability depends on how the agent substitutes input.

Medium

SKILL.md:70-80

Privacy-Invasive Personal Profile Aggregation

The skill promotes finding named individuals for candidate research, identity verification, reconnecting, and digital-footprint analysis. Aggregating public profiles without consent can enable stalking, discrimination, harassment, or covert screening.

The listed use cases explicitly target identifiable people and sensitive decision contexts. The data may be public, so harmful use is possible rather than certain.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/social_media_finder.py:118

Generic API/secret keys

print("3. Provide it to me or set it as an environment variable (BROWSERACT_API_KEY).", flush=True)

The error message tells users they may provide the API key to the agent. Sharing credentials through conversation can expose them in logs or model context.

High

SKILL.md:20

Generic API/secret keys

Before running, check the `BROWSERACT_API_KEY` environment variable. If not set, do not take other m

The instruction explicitly tells the agent to ask the user to provide an API key. Secrets entered in conversation may be retained or exposed beyond the process environment.

Risk Factors

🌐 Network access (8)

scripts/social_media_finder.py:34 scripts/social_media_finder.py:61 scripts/social_media_finder.py:89 scripts/social_media_finder.py:15 scripts/social_media_finder.py:47 scripts/social_media_finder.py:116 SKILL.md:22 SKILL.md:64

🔑 Env variables (10)

scripts/social_media_finder.py:107 scripts/social_media_finder.py:107 scripts/social_media_finder.py:18 scripts/social_media_finder.py:23 scripts/social_media_finder.py:107 scripts/social_media_finder.py:113 scripts/social_media_finder.py:118 scripts/social_media_finder.py:123 SKILL.md:4 SKILL.md:20

⚙️ External commands (16)

SKILL.md:20 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:37-40 SKILL.md:40-43 SKILL.md:43-50 SKILL.md:50-51 SKILL.md:51-52 SKILL.md:52-53 SKILL.md:53-54 SKILL.md:54-55 SKILL.md:55-61 SKILL.md:61-62 SKILL.md:62

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/browser-act-social-media-finder-skill/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/browser-act-social-media-finder-skill/security.svg)](https://skillstore.io/skills/browser-act-social-media-finder-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/browser-act-social-media-finder-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/browser-act-social-media-finder-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/browser-act-social-media-finder-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

browser-act. (2026). social-media-finder-skill security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/browser-act-social-media-finder-skill/audits/6

BibTeX citation

@techreport{browser-act-browser-act-social-media-finder-skill-2026,
  author = {browser-act},
  title = {social-media-finder-skill security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/browser-act-social-media-finder-skill/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "social-media-finder-skill security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "browser-act"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/browser-act-social-media-finder-skill/audits/6"
identifiers:
  - type: other
    value: "skillstore:browser-act-social-media-finder-skill:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Audit Official Brand Accounts

Locate public brand profiles across networks and compare their URLs, descriptions, and audience sizes.

Review Your Public Footprint

Find profiles associated with your own name before updating privacy settings or account information.

Find Customer Support Channels

Identify likely official social accounts for a company before contacting its support team.

Try These Prompts

Find a Brand

Find public social media profiles for [brand name]. Return platform, profile URL, page title, and follower count when available.

Audit My Profiles

Search for public profiles associated with my name, [name]. Group likely matches by platform and explain uncertainty without claiming identity.

Locate Official Support Accounts

Find public social accounts for [company]. Prioritize accounts that appear official and list evidence from titles, descriptions, and profile URLs.

Compare Brand Presence

Find profiles for [brand A] and [brand B] separately. Compare platform coverage and follower counts, and flag uncertain matches for manual review.

Best Practices

Set BROWSERACT_API_KEY through a secure environment or secret manager, never through chat.
Use distinctive brand names or additional context, then verify each result manually.
Search only public data for lawful purposes and respect privacy, consent, and platform policies.

Avoid

Do not use results to stalk, harass, discriminate, or make unsupported identity claims.
Do not treat name matches as proof that profiles belong to the same person.
Do not place untrusted search text directly into a shell command.

Frequently Asked Questions

What information can the skill return?

It can return platform names, follower counts, page titles, description snippets, profile URLs, and a CSV download link.

Which platforms can it search?

The documentation lists Facebook, X, Instagram, LinkedIn, TikTok, and other networks supported by the BrowserAct workflow.

Does it require an API key?

Yes. Configure BROWSERACT_API_KEY securely in the environment before execution.

Does a result prove profile ownership?

No. Name and brand matches can be ambiguous, so verify profile ownership independently.

How long can a search run?

The script polls for up to 15 minutes and reports status every 10 seconds.

Can it search private profile data?

No private-data capability is documented. Use only lawfully accessible public information and follow applicable policies.

Developer Details

Author

browser-act

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/browser-act/skills/tree/main/solutions/lead-generation/social-media-finder-skill

Ref

a39a91716eadede5f4cdefd78178fed4e837a128

Maintenance freshness

7/24/2026

Usage

9 downloads · 120 views

File structure

📁 scripts/

📄 social_media_finder.py

📄 SKILL.md