acme-shop

Warn

Audited by Socket on Apr 20, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's core capabilities match its ecommerce purpose and data mainly flows to the stated ACME API, so it is not fundamentally deceptive. However, it enables autonomous financial transactions and real-world order placement, and the example payment flow forwards a wallet private key to third-party x402 code; those factors make the overall risk medium even though the skill appears purpose-aligned.

Confidence: 83%Severity: 61%
Audit Metadata
Analyzed At
Apr 20, 2026, 12:51 PM
Package URL
pkg:socket/skills-sh/402md%2Fskillmd%2Facme-shop%2F@770c7e672af9b486ca99ab4affa3f6b1b99b8364
Security Audit — socket — acme-shop