skills/orcaqubits/agentic-commerce-claude-plugins/ucp-checkout-mcp/Socket

ucp-checkout-mcp

Warn

Audited by Socket on Mar 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's core purpose is coherent, and its data flows point to official UCP/Shopify endpoints rather than an intermediary. The main concerns are that it equips an AI agent for autonomous checkout actions and instructs live fetching of external docs while the agent also has write/exec capabilities, raising real-world action and indirect prompt-injection risk.

Confidence: 86%Severity: 61%

Audit Metadata

Analyzed At

Mar 19, 2026, 07:32 AM

Package URL

pkg:socket/skills-sh/OrcaQubits%2Fagentic-commerce-claude-plugins%2Fucp-checkout-mcp%2F@565a7a48c6f0a8a7903b96ae423e2c9d605afbb9