ap2-human-not-present-flow

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is coherent with its stated purpose and uses plausible official docs, but that purpose is to build autonomous post-authorization purchasing. The main risk is autonomy abuse and real-world financial action, not malware or credential theft.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 17, 2026, 06:34 PM
Package URL
pkg:socket/skills-sh/orcaqubits%2Fagentic-commerce-skills-plugins%2Fap2-human-not-present-flow%2F@d6671fbf19dd7802e364d84887f57670225f10876ff35a474bb4c8ad99478ea8