library-ebooks

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

SUSPICIOUS: The skill's stated purpose is Amazon/Kindle library access, but its actual footprint routes searches, credentials, and downloads through unrelated mirror domains that resemble shadow-library infrastructure rather than official Amazon services. The credential forwarding and unverifiable downloader path are disproportionate and inconsistent with the claimed purpose.

Confidence: 93%Severity: 88%
Audit Metadata
Analyzed At
Mar 18, 2026, 03:46 PM
Package URL
pkg:socket/skills-sh/montagao%2Fskills%2Flibrary-ebooks%2F@cd883a88b54b0ee1ef6644dbd5e8e3d88deaedc2