universal-checkout
Discover, buy, track, and return products across Amazon, Walmart, Target, Best Buy, eBay, and 50+ other US retailers via the Zinc API (zinc.com). Use when the user wants to search for or buy a product, check out, check order status or tracking, cancel an order, or return an item programmatically....
Install this skill
or
80/100
Security score
The universal-checkout skill was audited on Aug 17, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 53
Curl to non-GitHub URL
SourceSKILL.md
| 51 | |
| 52 | ```bash |
| 53 | curl "https://api.zinc.com/search?q=cast+iron+skillet" \ |
| 54 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 55 | ``` |
medium line 96
Curl to non-GitHub URL
SourceSKILL.md
| 94 | |
| 95 | ```bash |
| 96 | curl -X POST https://api.zinc.com/orders \ |
| 97 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 98 | -H "Content-Type: application/json" \ |
medium line 161
Curl to non-GitHub URL
SourceSKILL.md
| 159 | |
| 160 | ```bash |
| 161 | curl https://api.zinc.com/orders/<order_id> \ |
| 162 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 163 | ``` |
medium line 187
Curl to non-GitHub URL
SourceSKILL.md
| 185 | |
| 186 | ```bash |
| 187 | curl -X POST https://api.zinc.com/returns \ |
| 188 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 189 | -H "Content-Type: application/json" \ |
Scanned on Aug 17, 2026
View Security Dashboard