ebay-search

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The overall behavior matches an eBay search skill, but the implementation relies on Gooseworks/Orthogonal proxy endpoints rather than direct official APIs, reads a raw credential file, and includes an alternate orth.sh endpoint with weak ownership verification. This is not clearly malicious, but the data flow and trust boundaries are less transparent than the stated purpose suggests.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
Apr 28, 2026, 01:07 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Febay-search%2F@ba7029d6a965e772df3b23b0c809ec977c91b0c4