amazon

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are mostly aligned, and the browser tooling appears to come from an official, verifiable source. The main risk is autonomy abuse: the skill empowers the agent to make real purchases and returns with limited user confirmation, including silent completion of returns and no confirmation for reorders.

Confidence: 92%Severity: 76%
Audit Metadata
Analyzed At
Sep 23, 2026, 06:39 AM
Package URL
pkg:socket/skills-sh/tychohq%2Fagent-skills%2Famazon%2F@201053c55d205746029f53df1fd354ab042aa66ee9e45094b5f231c0f7b31dc4