pp-amazon-seller

Warn

Audited by Socket on May 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose and Amazon credential requirements mostly fit the stated Amazon Seller use case, but the skill relies on externally installed CLIs/MCP components with only partially established provenance and adds arbitrary webhook/file delivery paths that can exfiltrate seller data. Risk is driven more by supply-chain and transitive-trust exposure than by overtly malicious behavior.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
May 8, 2026, 07:03 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-amazon-seller%2F@6a0a6ab3df60834a2a8162d2cc14562a3ca34fec