skills/montagao/skills/library-ebooks/Socket

library-ebooks

Warn

Audited by Socket on Oct 2, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is Kindle-library lookup/download, but the actual data flow sends searches and a download key to non-Amazon proxy/mirror domains. The certifi docs are benign, but the core service relationship is unverifiable and the credential routing is inconsistent with official Amazon access patterns.

Confidence: 91%Severity: 83%

Audit Metadata

Analyzed At

Oct 2, 2026, 02:45 PM

Package URL

pkg:socket/skills-sh/montagao%2Fskills%2Flibrary-ebooks%2F@cb0d34a78dfd0502f8a2c6483f8e047deafcf59fef868d95d678e29dece9c68b