bankr-shopify

Warn

Audited by Socket on Sep 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core Shopify/API guidance is benign and routes data only to official Shopify and Bankr endpoints with no third-party installer or proxy. Risk rises because the Bankr bridge adds autonomous financial actions and webhook-driven token payouts, which are real-world effects beyond ordinary store administration; this is proportionate to the stated purpose but still materially dangerous if invoked without explicit user confirmation.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Sep 24, 2026, 04:45 AM
Package URL
pkg:socket/skills-sh/bankrbot%2Fskills%2Fbankr-shopify%2F@08ecb8116193f8adea5fc78c30fd97594e9b79d898c818e75d48921cd3b901d1
Security Audit — socket — bankr-shopify