ziptax-sales-tax
Facilitates U.S. sales tax rate lookups using the ZipTax API for accurate tax calculations based on addresses or ZIP codes.
Install this skill
or
80/100
Security score
The ziptax-sales-tax skill was audited on Feb 16, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 22
Curl to non-GitHub URL
SourceSKILL.md
| 22 | curl -s "https://api.zip-tax.com/request/v60?address=200+Spectrum+Center+Drive+Irvine+CA+92618" \ |
medium line 28
Curl to non-GitHub URL
SourceSKILL.md
| 28 | curl -s "https://api.zip-tax.com/request/v60?postalcode=92618" \ |
medium line 34
Curl to non-GitHub URL
SourceSKILL.md
| 34 | curl -s "https://api.zip-tax.com/request/v60?lat=33.6525&lng=-117.7479" \ |
low line 15
External URL reference
SourceSKILL.md
| 15 | Set `ZIPTAX_API_KEY` env variable with your API key from https://platform.zip.tax (DEVELOP > API Keys). |
low line 22
External URL reference
SourceSKILL.md
| 22 | curl -s "https://api.zip-tax.com/request/v60?address=200+Spectrum+Center+Drive+Irvine+CA+92618" \ |
low line 28
External URL reference
SourceSKILL.md
| 28 | curl -s "https://api.zip-tax.com/request/v60?postalcode=92618" \ |
low line 34
External URL reference
SourceSKILL.md
| 34 | curl -s "https://api.zip-tax.com/request/v60?lat=33.6525&lng=-117.7479" \ |
low line 42
External URL reference
SourceSKILL.md
| 42 | 3. Make GET request to `https://api.zip-tax.com/request/v60` with auth header |
Scanned on Feb 16, 2026
View Security DashboardInstall this skill with one command
/learn @openclaw/ziptax