purch-api

Enables AI-powered product searches and crypto checkouts, integrating e-commerce features for seamless shopping experiences.

Install this skill

or

17/100

Security score

The purch-api skill was audited on Feb 9, 2026 and we found 39 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 409

Template literal with variable interpolation in command context

SourceSKILL.md

409	privateKey: `0x${string}`

medium line 420

Template literal with variable interpolation in command context

SourceSKILL.md

420	const tx = parseTransaction(serializedTransaction as `0x${string}`);

medium line 440

Template literal with variable interpolation in command context

SourceSKILL.md

440	const tx = parseTransaction(serializedTransaction as `0x${string}`);

medium line 485

Template literal with variable interpolation in command context

SourceSKILL.md

485	console.log(`Order ${orderId} paid. Tx: ${signature}`);

medium line 522

Template literal with variable interpolation in command context

SourceSKILL.md

522	const tx = parseTransaction(serializedTransaction as `0x${string}`);

medium line 525

Template literal with variable interpolation in command context

SourceSKILL.md

525	console.log(`Order ${orderId} paid. Tx: ${hash}`);

medium line 30

Curl to non-GitHub URL

SourceSKILL.md

30	curl "https://api.purch.xyz/search?q=headphones&priceMax=100"

medium line 69

Curl to non-GitHub URL

SourceSKILL.md

69	curl -X POST "https://api.purch.xyz/shop" \

medium line 121

Curl to non-GitHub URL

SourceSKILL.md

121	curl -X POST "https://api.purch.xyz/buy" \

medium line 142

Curl to non-GitHub URL

SourceSKILL.md

142	curl -X POST "https://api.purch.xyz/buy" \

medium line 161

Curl to non-GitHub URL

SourceSKILL.md

161	curl -X POST "https://api.purch.xyz/buy" \

low line 452

Fetch to external URL

SourceSKILL.md

452	const searchResponse = await fetch("https://api.purch.xyz/shop", {

low line 460

Fetch to external URL

SourceSKILL.md

460	const orderResponse = await fetch("https://api.purch.xyz/buy", {

low line 494

Fetch to external URL

SourceSKILL.md

494	const searchResponse = await fetch("https://api.purch.xyz/shop", {

low line 502

Fetch to external URL

SourceSKILL.md

502	const orderResponse = await fetch("https://api.purch.xyz/buy", {

low line 14

External URL reference

SourceSKILL.md

14	Base URL: `https://api.purch.xyz`

low line 30

External URL reference

SourceSKILL.md

30	curl "https://api.purch.xyz/search?q=headphones&priceMax=100"

low line 53

External URL reference

SourceSKILL.md

53	"imageUrl": "https://...",

low line 54

External URL reference

SourceSKILL.md

54	"productUrl": "https://amazon.com/dp/B0CXYZ1234",

low line 69

External URL reference

SourceSKILL.md

69	curl -X POST "https://api.purch.xyz/shop" \

low line 97

External URL reference

SourceSKILL.md

97	"imageUrl": "https://...",

low line 98

External URL reference

SourceSKILL.md

98	"productUrl": "https://amazon.com/dp/B09XYZ123",

low line 106

External URL reference

SourceSKILL.md

106	"productUrl": "https://allbirds.com/products/tree-runners",

low line 121

External URL reference

SourceSKILL.md

121	curl -X POST "https://api.purch.xyz/buy" \

low line 142

External URL reference

SourceSKILL.md

142	curl -X POST "https://api.purch.xyz/buy" \

low line 161

External URL reference

SourceSKILL.md

161	curl -X POST "https://api.purch.xyz/buy" \

low line 164

External URL reference

SourceSKILL.md

164	"productUrl": "https://store.com/products/item-name",

low line 187

External URL reference

SourceSKILL.md

187	"imageUrl": "https://...",

low line 191

External URL reference

SourceSKILL.md

191	"checkoutUrl": "https://www.crossmint.com/checkout/550e8400..."

low line 243

External URL reference

SourceSKILL.md

243	bun run scripts/buy.ts --url "https://store.com/products/item" --variant 41913945718867 \

low line 260

External URL reference

SourceSKILL.md

260	bun run scripts/buy_and_sign.ts --url "https://store.com/products/item" --variant 41913945718867 \

low line 298

External URL reference

SourceSKILL.md

298	Explorer: https://solscan.io/tx/5UfgJ3vN...

low line 305

External URL reference

SourceSKILL.md

305	Explorer: https://basescan.org/tx/0x1234...

low line 390

External URL reference

SourceSKILL.md

390	client = Client("https://api.mainnet-beta.solana.com")

low line 424

External URL reference

SourceSKILL.md

424	console.log("Explorer: https://basescan.org/tx/" + hash);

low line 452

External URL reference

SourceSKILL.md

452	const searchResponse = await fetch("https://api.purch.xyz/shop", {

low line 460

External URL reference

SourceSKILL.md

460	const orderResponse = await fetch("https://api.purch.xyz/buy", {

low line 494

External URL reference

SourceSKILL.md

494	const searchResponse = await fetch("https://api.purch.xyz/shop", {

low line 502

External URL reference

SourceSKILL.md

502	const orderResponse = await fetch("https://api.purch.xyz/buy", {

Scanned on Feb 9, 2026

View Security Dashboard

Installation guide →

GitHub Stars 2.2K

Rate this skill

Categorymarketing

UpdatedApril 4, 2026

openclaw api growth-marketer product-marketer sdr customer-success-manager business-development stripe paypal google-analytics 🇺🇸 US marketing sales

openclaw/skills