integrate-payment-gateway

Warn

Audited by Socket on Oct 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill is purpose-aligned overall, but its explicit support for autonomous, non-interactive financial transactions presents high risk because it does not require user approval for each consequential action. The unpinned validation CLI adds limited supply-chain risk. The scanner's concealment finding is unsupported; no evidence establishes malicious intent.

Confidence: 91%Severity: 82%
Audit Metadata
Analyzed At
Oct 31, 2026, 11:22 AM
Package URL
pkg:socket/skills-sh/vesviet%2Fagent-skills%2Fintegrate-payment-gateway%2F@c6cd8df425254015678c5172c028e4df88ee3cdd264de4f96087e5ef812f5508