amazon-search

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose is plausible, but it reads raw local credentials and sends them plus user queries through a proxy/intermediary rather than directly to the stated search provider. The behavior is not clearly malicious, yet the credential handling and indirect data flow are broader than necessary for a basic Amazon search skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Apr 28, 2026, 01:07 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Famazon-search%2F@1c0ff36650ef0748074f8b6be7f45cb409c0eb82