amazon-search

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's functionality matches its stated Amazon-search purpose, but it routes searches and credentials through Orthogonal's gateway instead of SearchAPI's direct API. No clear malware or overt exfiltration is present, and there is no install payload, but the intermediary credential/data flow and partially verified CLI provenance raise medium trust concerns.

Confidence: 83%Severity: 52%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:58 PM
Package URL
pkg:socket/skills-sh/orthogonal-sh%2Fskills%2Famazon-search%2F@f3a77958b5a63a91b68bbb9d591e3d2ee6a303b1