Skip to main content

autonomous-commerce

Enables autonomous e-commerce purchases with escrow protection and cryptographic proof for secure transactions.

Install this skill

or
71/100

Security score

The autonomous-commerce skill was audited on Feb 19, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 196

Template literal with variable interpolation in command context

SourceSKILL.md
196const dataString = `${orderData.orderId}|${orderData.total}|${orderData.timestamp}`;
medium line 203

Template literal with variable interpolation in command context

SourceSKILL.md
203return `0x${hash}`;
medium line 211

Template literal with variable interpolation in command context

SourceSKILL.md
211console.log(`Proof hash: ${proof}`);
medium line 226

Template literal with variable interpolation in command context

SourceSKILL.md
226`purchase-${Date.now()}`,
medium line 242

Template literal with variable interpolation in command context

SourceSKILL.md
242console.log(`Escrow ${escrowId} released on verified proof ${proofHash}`);
low line 221

Access to .env file

SourceSKILL.md
221privateKey: process.env.WALLET_PRIVATE_KEY,
low line 422

External URL reference

SourceSKILL.md
422- Moltbook post: https://moltbook.com/post/8cc8ee6b-8ce5-40d8-81e9-abf5a33d7619
low line 427

External URL reference

SourceSKILL.md
427- Moltbook post: https://moltbook.com/post/86ffca5e-c57b-497d-883d-688c29d6cf88
low line 431

External URL reference

SourceSKILL.md
431- Source: https://developers.openai.com/blog/skills-shell-tips
Scanned on Feb 19, 2026
View Security Dashboard