etsy-star-seller

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose is benign and the skill itself appears to be a documentation-style Etsy guidance tool with no credential access or direct Etsy integration. The main risk is install trust: it uses a transitive `npx skills add` flow, the exact referenced repo was not clearly verified from the supplied evidence, and the installer has default telemetry. This is better classified as medium supply-chain/trust risk rather than malware.

Confidence: 87%Severity: 52%
Audit Metadata
Analyzed At
Apr 14, 2026, 04:48 AM
Package URL
pkg:socket/skills-sh/nexscope-ai%2FeCommerce-Skills%2Fetsy-star-seller%2F@d0f7ca8b7ecb9cf57d4d98d72becb726e91f8a41