skills/fxjim/agent-commerce-guard/buy-agent-commerce-guard/Socket

buy-agent-commerce-guard

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s capabilities mostly match its purpose, but it authorizes AI-assisted cryptocurrency payment and depends on merchant-controlled vercel-hosted endpoints plus runtime MCP discovery. Not confirmed malware, but high security risk due real-world financial action and moderate trust/data-flow concerns.

Confidence: 82%Severity: 74%

Audit Metadata

Analyzed At

Jul 23, 2026, 07:31 PM

Package URL

pkg:socket/skills-sh/fxjim%2Fagent-commerce-guard%2Fbuy-agent-commerce-guard%2F@a2023282009fc75aa0f070e0c2e5028d442c4d173ba4f0dd18a20e363baec5e2