shopify-store-translator

Warn

Audited by Socket on May 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Mostly purpose-aligned Shopify translation automation, but the mandatory first-step remote `skills update` is the dominant concern. That transitive update-before-use behavior materially increases supply-chain and trust risk, so the skill is best classified as SUSPICIOUS rather than benign.

Confidence: 84%Severity: 74%
Audit Metadata
Analyzed At
May 19, 2026, 09:58 AM
Package URL
pkg:socket/skills-sh/lvsao%2Fshopify-skill-hub%2Fshopify-store-translator%2F@f06e5f3987eacd8fd667e68c43fea3f75dd6b077
Security Audit — socket — shopify-store-translator