linkfox-keepa-product-series
Warn
Audited by Socket on Jul 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core Amazon history-query purpose is coherent, and the expected API key use is proportionate, but the skill adds medium trust risk through transitive skill installation and a direct ZIP download from an unverifiable artifact source. No clear credential theft or malicious exfiltration is shown, yet the install path and fallback behavior exceed what a simple data-query skill strictly needs.
Confidence: 84%Severity: 62%
Audit Metadata