ecommerce-amazon-advertising-api

Warn

Audited by Socket on Aug 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's capabilities largely match its Amazon Ads purpose and its credential scope is restrained, but it routes all account data and actions through Nexscope's backend instead of official Amazon endpoints. That proxy design may be intentional and documented, yet it creates meaningful third-party data-flow and trust risk for a credentialed ads-management skill.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Aug 31, 2026, 05:39 AM
Package URL
pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fecommerce-amazon-advertising-api%2F@d5fa9b36640541e5e67b9c600bbe089a576d5bc419ca65607b4955dc2876a9d5
Security Audit — socket — ecommerce-amazon-advertising-api