pp-amazon-orders
Warn
Audited by Socket on May 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's capabilities mostly align with its stated Amazon order-analysis purpose, and the install sources appear same-publisher and publicly verifiable. However, it handles raw Amazon session cookies, stores them locally, can post outputs to arbitrary webhooks, and installs external CLIs/MCP components, making the overall footprint moderately risky even without clear malicious intent.
Confidence: 85%Severity: 62%
Audit Metadata