commercevault-edd-ecommerce-orchestrator

Warn

Audited by Socket on Jul 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated e-commerce integration purpose is plausible, but the install path is not internally consistent with the claimed publisher and appears to rely on unverifiable third-party code that would receive live API credentials and commerce data. Main risk is supply-chain and credential forwarding, not confirmed malware.

Confidence: 89%Severity: 84%
Audit Metadata
Analyzed At
Jul 12, 2026, 12:55 AM
Package URL
pkg:socket/skills-sh/Aradotso%2Fdata-skills%2Fcommercevault-edd-ecommerce-orchestrator%2F@6dab08d58cd121286f6a5aa2113a3df4978f90a567eb180b5990b77c614c04d9
Security Audit — socket — commercevault-edd-ecommerce-orchestrator