faststore-storefront

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/graphql-types-queries-and-mutations.md

The fragment is mostly legitimate FastStore GraphQL extension documentation and does not show clear malware or intentional supply-chain sabotage. The contact-form example is security-sensitive because it forwards user personal data to a hardcoded playground tenant and exposes caught errors; it should use validated store-specific configuration, appropriate authentication and abuse controls, and generic error responses. The installment examples also contain null-handling bugs that can cause runtime failures. Review and remediation are recommended before production use.

Confidence: 95%Severity: 68%
Audit Metadata
Analyzed At
Sep 15, 2026, 07:54 PM
Package URL
pkg:socket/skills-sh/vtex%2Fskills%2Ffaststore-storefront%2F@b030b4d321bdbf7afd8045c28a1026a54c7403a891efd5e59084882d1a74a1f4