pp-amazon-seller
Warn
Audited by Socket on May 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose and Amazon credential requirements mostly fit the stated Amazon Seller use case, but the skill relies on externally installed CLIs/MCP components with only partially established provenance and adds arbitrary webhook/file delivery paths that can exfiltrate seller data. Risk is driven more by supply-chain and transitive-trust exposure than by overtly malicious behavior.
Confidence: 84%Severity: 63%
Audit Metadata