bankr-shopify

Warn

Audited by Socket on Jul 5, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

BENIGN for purpose alignment and data-flow integrity, but HIGH-IMPACT in operation. The skill uses official Shopify and Bankr endpoints with proportionate credentials and no suspicious installer chain, yet it equips the agent to trigger autonomous financial/onchain actions from store events, so overall risk is elevated despite low malware likelihood.

Confidence: 90%Severity: 69%
Audit Metadata
Analyzed At
Jul 5, 2026, 02:12 PM
Package URL
pkg:socket/skills-sh/BankrBot%2Fopenclaw-skills%2Fbankr-shopify%2F@08ecb8116193f8adea5fc78c30fd97594e9b79d898c818e75d48921cd3b901d1
Security Audit — socket — bankr-shopify