skills/athina-ai/goose-skills/amazon-search/Socket

amazon-search

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but it reads raw local credentials and sends them plus user queries through a proxy/intermediary rather than directly to the stated search provider. The behavior is not clearly malicious, yet the credential handling and indirect data flow are broader than necessary for a basic Amazon search skill.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jul 2, 2026, 06:18 AM

Package URL

pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Famazon-search%2F@054a084656d8489bb9e46a2beef6c8b6c4654fbbd7a390c7bf83a9b2376c4d57