square-automation
Warn
Audited by Socket on Jul 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The business purpose is coherent, but the skill routes sensitive Square operations through a third-party MCP intermediary using outdated/legacy setup details. It is not overtly malicious, yet the stale endpoint/tooling guidance and indirect data flow make it a medium-risk skill that should be treated cautiously.
Confidence: 85%Severity: 60%
Audit Metadata