homedepot-checkout
Buy products from The Home Depot (homedepot.com) and manage those orders via the Zinc API (zinc.com). Use when the user wants to purchase, order, or check out an item from The Home Depot, check The Home Depot order status or tracking, cancel a The Home Depot order, or return a The Home Depot item...
Install this skill
or
80/100
Security score
The homedepot-checkout skill was audited on Aug 17, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 53
Curl to non-GitHub URL
SourceSKILL.md
| 51 | |
| 52 | ```bash |
| 53 | curl "https://api.zinc.com/search?q=cast+iron+skillet" \ |
| 54 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 55 | ``` |
medium line 94
Curl to non-GitHub URL
SourceSKILL.md
| 92 | |
| 93 | ```bash |
| 94 | curl -X POST https://api.zinc.com/orders \ |
| 95 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 96 | -H "Content-Type: application/json" \ |
medium line 159
Curl to non-GitHub URL
SourceSKILL.md
| 157 | |
| 158 | ```bash |
| 159 | curl https://api.zinc.com/orders/<order_id> \ |
| 160 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 161 | ``` |
medium line 185
Curl to non-GitHub URL
SourceSKILL.md
| 183 | |
| 184 | ```bash |
| 185 | curl -X POST https://api.zinc.com/returns \ |
| 186 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 187 | -H "Content-Type: application/json" \ |
Scanned on Aug 17, 2026
View Security Dashboard