skills/tommy9959/tommy-hardware-cn/sourcing-in-china/Socket

sourcing-in-china

Warn

Audited by Socket on Jun 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it routes all sourcing queries through an unverified third-party MCP proxy instead of official Made-in-China.com endpoints. No credential harvesting is evident, so this is not confirmed malware, but the intermediary data flow and weak operator provenance create meaningful privacy and trust risk.

Confidence: 85%Severity: 61%

Audit Metadata

Analyzed At

Jun 23, 2026, 12:12 AM

Package URL

pkg:socket/skills-sh/Tommy9959%2Ftommy-hardware-cn%2Fsourcing-in-china%2F@0e357101d97da425c8e8d02697319b96e1121e3c9761fcf78df6d78dc76ba8ee