ecommerce-walmart-category-market

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and read-only scope are mostly coherent, and there is no clear malware behavior. The main concern is data-flow integrity and trust: all requests and the API key go to NexScope’s proxy instead of an official Walmart endpoint, and the supplied references conflict with NexScope’s public docs on URL path, auth formatting, and response shape. That inconsistency makes the skill higher risk than a direct official API integration, though not malicious on the provided evidence.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 14, 2026, 04:15 AM
Package URL
pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fecommerce-walmart-category-market%2F@53179f60e2b73158c3e885da138a19712eec48fc4e25733c5acd69bee7460af5
Security Audit — socket — ecommerce-walmart-category-market