1800flowers-checkout
Buy products from 1-800-Flowers (1800flowers.com) and manage those orders via the Zinc API (zinc.com). Use when the user wants to purchase, order, or check out an item from 1-800-Flowers, check 1-800-Flowers order status or tracking, cancel a 1-800-Flowers order, or return a 1-800-Flowers item. O...
Install this skill
or
80/100
Security score
The 1800flowers-checkout skill was audited on Aug 17, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 53
Curl to non-GitHub URL
SourceSKILL.md
| 51 | |
| 52 | ```bash |
| 53 | curl "https://api.zinc.com/search?q=cast+iron+skillet" \ |
| 54 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 55 | ``` |
medium line 94
Curl to non-GitHub URL
SourceSKILL.md
| 92 | |
| 93 | ```bash |
| 94 | curl -X POST https://api.zinc.com/orders \ |
| 95 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 96 | -H "Content-Type: application/json" \ |
medium line 159
Curl to non-GitHub URL
SourceSKILL.md
| 157 | |
| 158 | ```bash |
| 159 | curl https://api.zinc.com/orders/<order_id> \ |
| 160 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 161 | ``` |
medium line 185
Curl to non-GitHub URL
SourceSKILL.md
| 183 | |
| 184 | ```bash |
| 185 | curl -X POST https://api.zinc.com/returns \ |
| 186 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 187 | -H "Content-Type: application/json" \ |
Scanned on Aug 17, 2026
View Security Dashboard