skills/nexscope-ai/ecommerce-skills/brand-monitoring/Socket

brand-monitoring

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is coherent and low-privilege, with no obvious credential theft or disproportionate access. However, the installation path depends on a transitive `npx skills add` flow and the cited repo evidence does not clearly verify the specific `brand-monitoring` skill or `scripts/monitor.py`, so the footprint is only partially substantiated.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

Mar 20, 2026, 10:19 AM

Package URL

pkg:socket/skills-sh/nexscope-ai%2FeCommerce-Skills%2Fbrand-monitoring%2F@332da211d6c7d76066405d1d7a4b9f12370ccae8