Kabuzz

• Analyzed: May 11, 2026, 7:43 AM
• Findings: 1
• Version: 1.0.1
• Hash: d09f0abb62c9adcbed62768437cec671572e0f11da46e505060643d089b29393
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a legitimate MCP interface for the Kabuzz resale marketplace, enabling AI agents to perform e-commerce tasks like listing, buying, and negotiating. It operates via a standard `npx` command to run the `@kabuzz/mcp-server` package and requires a user-provided `KABUZZ_API_KEY`. The documentation in `SKILL.md` is well-structured, emphasizing safety features like spending limits and idempotency, with no evidence of malicious intent, data exfiltration, or harmful prompt injection.