brand-protection-ebay Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The templates.py script generates Amazon Brand Registry complaints, but the skill is explicitly for eBay brand protection. This is a critical mismatch with the SKILL.md description and VeRO program references.
• The detector.py appears to be a generic brand protection engine (hijacker, price, counterfeit detection) without clear eBay-specific integration (e.g., seller ID monitoring, eBay listing data sources). The SKILL.md claims eBay-specific methods, but the script may not implement them.
• The SKILL.md mentions 'VeRO complaint templates' and 'Cease & Desist letter', but the provided templates.py only shows an Amazon Brand Registry template. No eBay-specific VeRO template is visible in the excerpt.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• Dependency/runtime risk: command execution surface, credential or environment access
• Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.