amazon-keyword-search-volume

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is mostly coherent and narrowly scoped, but it routes Amazon keyword-demand queries and a bearer token through Frevana rather than an official Amazon API, and the exact endpoint is not disclosed in the skill text. This looks more like a third-party API wrapper than malware; risk is moderate due to credential forwarding and opaque data flow, not due to download-execute behavior.

Confidence: 83%Severity: 52%
Audit Metadata
Analyzed At
Sep 22, 2026, 06:32 PM
Package URL
pkg:socket/skills-sh/finpeakinc%2Ffrevana-skills%2Famazon-keyword-search-volume%2F@6b8c5f2b9305dd3fdd02d412acfb3b825adcacf9afe5b9503d983b7a9940c5f5