amazon-search
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s purpose is plausible, but it reads raw local credentials and sends them plus user queries through a proxy/intermediary rather than directly to the stated search provider. The behavior is not clearly malicious, yet the credential handling and indirect data flow are broader than necessary for a basic Amazon search skill.
Confidence: 84%Severity: 62%
Audit Metadata