acme-shop
Warn
Audited by Socket on Apr 20, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core capabilities match its ecommerce purpose and data mainly flows to the stated ACME API, so it is not fundamentally deceptive. However, it enables autonomous financial transactions and real-world order placement, and the example payment flow forwards a wallet private key to third-party x402 code; those factors make the overall risk medium even though the skill appears purpose-aligned.
Confidence: 83%Severity: 61%
Audit Metadata