WooCommerce Automation
Warn
Audited by Socket on Oct 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The business functions fit the stated WooCommerce purpose, but install trust and data-flow integrity are weak: the skill points to an unverified MCP server path and may route sensitive store data and credentials through third-party infrastructure instead of directly to official WooCommerce APIs. Risk is elevated by autonomous customer-facing and store-modifying actions, though there is no confirmed malware behavior in the provided skill text.
Confidence: 83%Severity: 74%
Audit Metadata