skills/nexscope-ai/nexscope-ecommerce-skills/demand-validator/Socket

demand-validator

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose is coherent and its local execution footprint is modest, but the main risk is opaque data routing through Nexscope/LinkFox proxy endpoints instead of official first-party APIs. This is not confirmed malware, yet the intermediary credential and data flow raises medium trust and privacy concerns.

Confidence: 84%Severity: 57%

Audit Metadata

Analyzed At

Jun 26, 2026, 04:16 AM

Package URL

pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fdemand-validator%2F@d9c5e260262f16358c75b7dbf12b96c84ea5c3a48aa4cba86b34a5e2edef9107