ecommerce-amazon-product-price-series

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose is coherent for Amazon price-history analysis, and the credential scope is relatively narrow. But the real data flow is less transparent than claimed: it uses a Nexscope intermediary rather than direct Keepa access, the endpoint in the skill text does not match Nexscope’s public API docs, and the referenced local Python script is not available for review. This is not confirmed malware, but the endpoint mismatch and unverifiable script make the skill medium risk.

Confidence: 85%Severity: 56%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:13 AM
Package URL
pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fecommerce-amazon-product-price-series%2F@7c2ec35b4cd8d2bb4831d2fe15509ab0588c99bdd5664b61a257d2517c78892a
Security Audit — socket — ecommerce-amazon-product-price-series