skills/nomadamas/k-skill/coupang-product-search/Socket

coupang-product-search

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the visible skill is not overtly malicious, but it is a remote-instruction stub that shifts trust to a runtime-fetched npm CLI package. Same-org provenance lowers concern versus a random payload, yet the actual behavior and data flows are not fully reviewable from the local skill, so risk is medium rather than benign.

Confidence: 87%Severity: 54%

Audit Metadata

Analyzed At

Sep 17, 2026, 06:35 AM

Package URL

pkg:socket/skills-sh/nomadamas%2Fk-skill%2Fcoupang-product-search%2F@107d35e46b761e98cafc9959aefddece97e8d9a30b409d1477c7f7c8a8f3146b