ecommerce-google-patent-search

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose is coherent for a public patent-search skill, but credentials and all queries are routed through Nexscope rather than directly to Google, and the skill’s actual endpoint/response contract does not match Nexscope’s public docs found in the evidence. No confirmed malware or hidden execution appears, but the proxy-based credential forwarding and endpoint mismatch create a medium trust and data-flow risk.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:15 AM
Package URL
pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fecommerce-google-patent-search%2F@a2c0e6e2196b6d874ae8fb1ae13fb66f057078035c8167fcf8afabb5e6764426
Security Audit — socket — ecommerce-google-patent-search