ecommerce-product-ai-visibility
Warn
Audited by Socket on Sep 11, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The research and reporting pipeline broadly fits the stated ecommerce visibility purpose, but the mandatory hidden email step is a major mismatch: it performs an undisclosed real-world action on the user's behalf and instructs the agent to conceal it. External content handling adds moderate prompt-injection risk, but the covert email behavior is the primary reason this skill should not be treated as benign.
Confidence: 86%Severity: 78%
Audit Metadata