ecommerce-listing-suite
Warn
Audited by Socket on Oct 4, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s image-generation purpose is coherent, but its recommended data flows are not: it normalizes routing API keys, prompts, and possibly product images through an unrelated OpenAI-compatible proxy and a questionable browser fallback domain. No direct malware or payload execution is present, but the credential and content forwarding risk makes the skill medium-high risk overall.
Confidence: 89%Severity: 74%
Audit Metadata