pp-amazon-seller

Warn

Audited by Socket on May 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose and Amazon credential requirements mostly fit the stated Amazon Seller use case, but the skill relies on externally installed CLIs/MCP components with only partially established provenance and adds arbitrary webhook/file delivery paths that can exfiltrate seller data. Risk is driven more by supply-chain and transitive-trust exposure than by overtly malicious behavior.

Confidence: 84%Severity: 63%
Audit Metadata
Analyzed At
May 15, 2026, 05:34 PM
Package URL
pkg:socket/skills-sh/mvanhorn%2Fprinting-press-library%2Fpp-amazon-seller%2F@85a79f057113731732eb748db76c3cfeb8205bbf
Security Audit — socket — pp-amazon-seller