ebay-search

Warn

Audited by Socket on Jul 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall behavior matches an eBay search skill, but the implementation relies on Gooseworks/Orthogonal proxy endpoints rather than direct official APIs, reads a raw credential file, and includes an alternate orth.sh endpoint with weak ownership verification. This is not clearly malicious, but the data flow and trust boundaries are less transparent than the stated purpose suggests.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
Jul 2, 2026, 06:18 AM
Package URL
pkg:socket/skills-sh/athina-ai%2Fgoose-skills%2Febay-search%2F@33e7a729414c3c21bfc7cbf2e2c16c231f2e9f2586c9600e62687a32d70c6dab
Security Audit — socket — ebay-search