Security audit
Easyship (Official)
Security checks across malware telemetry and agentic risk
Overview
This Easyship skill is a disclosed shipping integration that can manage shipments, labels, pickups, billing history, and analytics using an Easyship API token.
Install only if you trust connecting your Easyship account to this remote MCP server. Use the least-privileged Easyship token available, and review label purchases, pickup scheduling, shipment cancellation or deletion, and billing queries before allowing the agent to proceed.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.