skills/nexscope-ai/ecommerce-skills/brand-monitoring/Socket

brand-monitoring

Warn

Audited by Socket on Apr 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The stated purpose is coherent and low-privilege, with no obvious credential theft or disproportionate access. However, the installation path depends on a transitive `npx skills add` flow and the cited repo evidence does not clearly verify the specific `brand-monitoring` skill or `scripts/monitor.py`, so the footprint is only partially substantiated.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

Apr 10, 2026, 07:28 AM

Package URL

pkg:socket/skills-sh/nexscope-ai%2FeCommerce-Skills%2Fbrand-monitoring%2F@8a45b777d104880a5f196a1e204f3bcb8dc6fa7d