commercevault-edd-ecommerce-orchestrator
Warn
Audited by Socket on Jul 12, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated e-commerce integration purpose is plausible, but the install path is not internally consistent with the claimed publisher and appears to rely on unverifiable third-party code that would receive live API credentials and commerce data. Main risk is supply-chain and credential forwarding, not confirmed malware.
Confidence: 89%Severity: 84%
Audit Metadata