agent-card

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities largely align: this is a live payment-card and shopping skill using official AgentCard surfaces, not an obvious credential-harvesting lure. However, it is inherently high risk because it allows an AI agent to perform real financial transactions, reveal card credentials, and place merchant orders; use should be tightly approval-gated.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
Jul 23, 2026, 03:48 PM
Package URL
pkg:socket/skills-sh/tiny-agent-company%2Fagent-card-skill%2Fagent-card%2F@dfcfe1147277a2dc149fde979f84837ac82bf0c9
Security Audit — socket — agent-card