Starship
starship / search / ebay-link-1

Audit report

eBay LINK

Broad accessReach : broadSensitive Access

by eBay Inc · Places to sell · Shopify App Store

Places to sell
Risk level
Broad access
Executive summary

Increase sales, list Shopify products on eBay Australia

Key insights

  • ◆Sales channel / inventory sync integration with eBay Australia, built by Omnivore Retail (publisher label shows 'eBay Inc' on App Store but actual developer/host is Omnivore).
  • ◆Privacy/terms documentation is sparse and combined into a single Terms of Use page lacking GDPR/CCPA/SOC2 statements.
  • ◆Small install base inferred from only 12 reviews; rating 3.2/5.
  • ◆No public CVEs or confirmed security incidents attributable to Omnivore Retail or this app.

Top findings

No critical or high findings detected.
Synthesis

Analysis summary

Increase sales, list Shopify products on eBay Australia

Key insights
  • ◆Sales channel / inventory sync integration with eBay Australia, built by Omnivore Retail (publisher label shows 'eBay Inc' on App Store but actual developer/host is Omnivore).
  • ◆Privacy/terms documentation is sparse and combined into a single Terms of Use page lacking GDPR/CCPA/SOC2 statements.
  • ◆Small install base inferred from only 12 reviews; rating 3.2/5.
  • ◆No public CVEs or confirmed security incidents attributable to Omnivore Retail or this app.
  • ◆Publisher marketing site reachable over HTTPS with valid cert but missing HSTS and CSP.

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Permissions

OAuth scopes requested

These are the access permissions this app asks for during install. The sensitivity column reflects PII exposure and merchant impact.

read_products
Low

Required to read Shopify catalog for syncing to eBay listings (inferred from app function).

write_products
Medium

Likely needed to update product metadata/inventory based on eBay activity (inferred).

read_orders
High

Likely required to route eBay-originated orders to Shopify for fulfillment (inferred from listing description).

write_orders
High

Likely required to create Shopify orders from eBay sales (inferred from 'routing orders back to Shopify for fulfillment').

read_inventory
Medium

Required for the stated 'inventory sync' feature (inferred).

write_inventory
High

Required for the stated 'inventory sync' feature to push stock changes (inferred).

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started

This section is available to signed-in users

Sign up free to unlock findings, data flow and theme code analysis for every Shopify app.

Get started
Attack surface

Network surface

Primary domain
omnivore.com.au
TLS grade
A
HSTS
Missing
CSP
Missing

HTTPS reachable with valid cert; nginx 1.24.0 on Ubuntu; no HSTS or CSP headers on root response. Privacy policy URL on App Store listing references http:// scheme.

Posture

Compliance & certifications

GDPR webhooks Fail
SOC 2 Type II Fail
ISO 27001 Fail
PCI DSS Fail

No compliance certifications publicly declared. The linked document is a Terms of Use, not a dedicated privacy policy.

Privacy policy
Track record

Publisher reputation

Publisher
eBay Inc
Verified Shopify Partner
No
Years active
0
Other apps
0
Past incidents
No past incidents on record.
LLM exposure

AI / LLM usage

No LLM usage detected. This app does not appear to forward any customer or merchant data to large-language-model providers.