commercevault-edd-ecommerce-api

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's stated EDD integration purpose is plausible and its direct-to-store data flow is mostly coherent, but install trust is weak: the publisher/repo relationship is unverifiable, the GitHub source is unpinned, and the local server receives store API credentials. The skill also overclaims some write capabilities relative to standard EDD REST documentation, which further reduces confidence.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fcommercevault-edd-ecommerce-api%2F@32c404f756fb3fc3d5d960cde556f24698ced721a3e730c9024bf6081e8d3bed
Security Audit — socket — commercevault-edd-ecommerce-api