pokemoncenter-checkout
Buy products from Pokémon Center (pokemoncenter.com) and manage those orders via the Zinc API (zinc.com). Use when the user wants to purchase, order, or check out an item from Pokémon Center, check Pokémon Center order status or tracking, cancel a Pokémon Center order, or return a Pokémon Center ...
Install this skill
or
80/100
Security score
The pokemoncenter-checkout skill was audited on Aug 17, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 53
Curl to non-GitHub URL
SourceSKILL.md
| 51 | |
| 52 | ```bash |
| 53 | curl "https://api.zinc.com/search?q=cast+iron+skillet" \ |
| 54 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 55 | ``` |
medium line 94
Curl to non-GitHub URL
SourceSKILL.md
| 92 | |
| 93 | ```bash |
| 94 | curl -X POST https://api.zinc.com/orders \ |
| 95 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 96 | -H "Content-Type: application/json" \ |
medium line 159
Curl to non-GitHub URL
SourceSKILL.md
| 157 | |
| 158 | ```bash |
| 159 | curl https://api.zinc.com/orders/<order_id> \ |
| 160 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 161 | ``` |
medium line 185
Curl to non-GitHub URL
SourceSKILL.md
| 183 | |
| 184 | ```bash |
| 185 | curl -X POST https://api.zinc.com/returns \ |
| 186 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 187 | -H "Content-Type: application/json" \ |
Scanned on Aug 17, 2026
View Security Dashboard