square-automation

Warn

Audited by Socket on Jul 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The business purpose is coherent, but the skill routes sensitive Square operations through a third-party MCP intermediary using outdated/legacy setup details. It is not overtly malicious, yet the stale endpoint/tooling guidance and indirect data flow make it a medium-risk skill that should be treated cautiously.

Confidence: 85%Severity: 60%
Audit Metadata
Analyzed At
Jul 18, 2026, 04:25 PM
Package URL
pkg:socket/skills-sh/rohitg00%2Fbuildwithclaude%2Fsquare-automation%2F@5c04a38a1ee193b252cb9c377116ec3e441096c1187f96e7b5d2e5c1863c6725
Security Audit — socket — square-automation