bankr-shopify
Warn
Audited by Socket on Sep 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Shopify/API guidance is benign and routes data only to official Shopify and Bankr endpoints with no third-party installer or proxy. Risk rises because the Bankr bridge adds autonomous financial actions and webhook-driven token payouts, which are real-world effects beyond ordinary store administration; this is proportionate to the stated purpose but still materially dangerous if invoked without explicit user confirmation.
Confidence: 87%Severity: 56%
Audit Metadata