ap2-human-not-present-flow

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is coherent with its stated AP2 purpose and uses seemingly official sources, but its purpose is inherently high-impact because it helps build autonomous purchasing flows with user-absent authorization. The biggest risks are real-world financial autonomy and live external-content ingestion combined with Bash/Write capabilities, not overt malware or credential theft.

Confidence: 88%Severity: 66%
Audit Metadata
Analyzed At
Mar 31, 2026, 06:09 AM
Package URL
pkg:socket/skills-sh/OrcaQubits%2Fagentic-commerce-skills-plugins%2Fap2-human-not-present-flow%2F@3734280f39c309036fe2b76094972f1d2b0a9ba0