Ehunt Etsy Product Query

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill appears to provide Etsy/EHunt analytics, but its activation language is broad enough to route ordinary Etsy questions through a third-party data service without explicit user intent.

Install only if you are comfortable with broad Etsy-related prompts potentially using EHunt or another third-party analytics service. Prefer a version that triggers on explicit EHunt intent or asks for confirmation before sending inferred Etsy research queries to the service.

SkillSpector (1)

By NVIDIA

Vague Triggers

High

Confidence: 95% confidence
Finding: The trigger text is intentionally broad: it says the skill should fire even when the user does not mention EHunt, as long as they ask generally about searching Etsy products, prices, sales, tags, or product selection. This can cause over-triggering and silent routing of ordinary Etsy requests to a third-party data service, creating consent, privacy, and data-governance risks and increasing the chance of unintended tool use.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal