kryptogo-pay-webhook

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Security
SecurityMEDIUM
references/code-examples.md

No clear malware is present. These are payment webhook examples with a significant security omission: without sender authentication or signature verification, forged callbacks may mark orders paid or alter payment/refund records. Treat them as unsafe to deploy as-is; verify provider signatures and validate callback values against the order and provider data.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Oct 3, 2026, 04:09 AM
Package URL
pkg:socket/skills-sh/paid-tw%2Fskills%2Fkryptogo-pay-webhook%2F@2ea19a7b24364bc442ffa164d4959572a112ac348ac19ef44e30f1c826b83dd6