amazon-a-plus

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is plausible, but the skill routes users toward unrelated third-party image services and a .top domain instead of staying within official OpenAI flows. Risk is driven more by intermediary data flow and trust ambiguity than by malware-like behavior; no confirmed payload execution or credential theft is shown in the provided text.

Confidence: 88%Severity: 64%
Audit Metadata
Analyzed At
Oct 4, 2026, 12:10 PM
Package URL
pkg:socket/skills-sh/xianyu110%2Fecommerce-image-skills%2Famazon-a-plus%2F@ffa5d77eaffe31d7847d6027589442a22999e0251f55ce4b6f8d98961f3a7ffa