woocommerce

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities match WooCommerce management, and there is no installer or hidden execution path, but its actual footprint is a third-party proxy model: the MATON_API_KEY, WooCommerce account linkage, and store data/actions all flow through Maton infrastructure rather than official WooCommerce auth endpoints. That makes the skill internally coherent but higher-risk than a direct WooCommerce integration due to credential forwarding and intermediary data access.

Confidence: 91%Severity: 62%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:53 PM
Package URL
pkg:socket/skills-sh/craftos-dev%2Fcraftbot%2Fwoocommerce%2F@d514be6a06916deebe7be0edfc8a74af17e13f2b7aed6a89a9b971fc520c5151
Security Audit — socket — woocommerce