commercevault-edd-ecommerce-api
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's stated EDD integration purpose is plausible and its direct-to-store data flow is mostly coherent, but install trust is weak: the publisher/repo relationship is unverifiable, the GitHub source is unpinned, and the local server receives store API credentials. The skill also overclaims some write capabilities relative to standard EDD REST documentation, which further reduces confidence.
Confidence: 89%Severity: 72%
Audit Metadata