market-share-analyzer

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s analytics purpose is coherent and its local execution footprint is modest, but the main data flow is routed through a NexScope proxy using publisher-controlled credentials and endpoint shapes that do not match official Jungle Scout/Keepa APIs. That proxy architecture creates medium risk around credential forwarding and opaque intermediary access, though there is no evidence of malware, hidden execution, or malicious payload delivery.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jun 28, 2026, 07:07 AM
Package URL
pkg:socket/skills-sh/nexscope-ai%2Fnexscope-ecommerce-skills%2Fmarket-share-analyzer%2F@32b90d23279b84c75c16d5ab1712b25269a65a8b11cf396869322903441a02a3
Security Audit — socket — market-share-analyzer