swiggy-pay

Warn

Audited by Socket on Sep 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s purpose and commands are internally coherent for Swiggy payment reconciliation, and data flow appears to target official Swiggy APIs. The main risk is that it depends on an unofficial third-party CLI already authenticated to Swiggy and can perform real-world order-confirmation actions, so trust and autonomy risk are medium even without clear evidence of malicious behavior.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Sep 7, 2026, 10:16 AM
Package URL
pkg:socket/skills-sh/hktitan%2Fswiggy-cli%2Fswiggy-pay%2F@705d6ef620abd37ab33973e0e296f8deaf2e8ec18bdc28b6cdbcf7c6218e3fdc
Security Audit — socket — swiggy-pay