skills/nexscope-ai/nexscope-ecommerce-skills/market-alert/Socket

market-alert

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, and there is no malicious installer or obvious payload execution, but it routes requests and credentials through a configurable NexScope proxy rather than direct official service endpoints. That intermediary credential/data flow is the main risk; otherwise the capability scope is mostly proportionate to market-alert reporting.

Confidence: 87%Severity: 56%

Audit Metadata

Analyzed At

Jun 28, 2026, 07:06 AM

Package URL

pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fmarket-alert%2F@2908194128f7d30717a89e3307e661750002e0ba47d3fb72fab22ecd608d92a4