ap2-human-not-present-flow
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill is coherent with its stated AP2 purpose and uses seemingly official sources, but its purpose is inherently high-impact because it helps build autonomous purchasing flows with user-absent authorization. The biggest risks are real-world financial autonomy and live external-content ingestion combined with Bash/Write capabilities, not overt malware or credential theft.
Confidence: 88%Severity: 66%
Audit Metadata