Easyship (Official)
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's requirements and runtime instructions are consistent with an Easyship API integration: it only requests an Easyship API token and provides shipping/tracking/pickup operations against mcp.easyship.com with no installs or unrelated accesses.
This skill appears to do exactly what it says: call Easyship's MCP API using the EASYSHIP_API_ACCESS_TOKEN. Before installing, ensure the token you provide has the minimum necessary permissions, rotate/revoke it if compromised, and avoid sharing it elsewhere. Confirm you're comfortable with the skill transmitting shipment and address data to mcp.easyship.com (the documented endpoint). Because it can be invoked autonomously by the agent, review activity logs and only enable the skill for agents/accounts you trust.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.