ecomseer
Warn
Audited by Socket on May 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The direct EcomSeer API calls fit the skill's purpose, but the deep-research workflow materially changes the trust boundary by forwarding the user's EcomSeer API key, query, and context to AdMapix, a separate service not necessary for basic analytics. This cross-vendor credential routing is the main risk and makes the overall footprint disproportionate to the stated purpose.
Confidence: 89%Severity: 82%
Audit Metadata