PPSPY: Shopify spy for dropshipping & shopify sales tracker tool

• Analyzed: Apr 2, 2026, 2:41 AM
• Findings: 1
• Version: 1.0.3
• Hash: 3c38c5c3d134ffafce9539953cf863d32727a200c0e42220938df8cb16b77d71
• Source: palm
• External report: View on VirusTotal

Findings (1)

The ppspy skill bundle provides a comprehensive interface for e-commerce intelligence, allowing users to analyze Shopify stores and Facebook ads via the PPSPY API. It installs the legitimate-looking 'ppspy-mcp-server' package from npm and requires a standard API key (PPSPY_API_KEY) for operation. No evidence of data exfiltration, malicious execution, or prompt injection was found in SKILL.md or _meta.json.