walmart-checkout
Buy products from Walmart (walmart.com) and manage those orders via the Zinc API (zinc.com). Use when the user wants to purchase, order, or check out an item from Walmart, check Walmart order status or tracking, cancel a Walmart order, or return a Walmart item. One API also covers Amazon, Walmart...
Install this skill
or
80/100
Security score
The walmart-checkout skill was audited on Aug 17, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 53
Curl to non-GitHub URL
SourceSKILL.md
| 51 | |
| 52 | ```bash |
| 53 | curl "https://api.zinc.com/search?q=cast+iron+skillet" \ |
| 54 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 55 | ``` |
medium line 96
Curl to non-GitHub URL
SourceSKILL.md
| 94 | |
| 95 | ```bash |
| 96 | curl -X POST https://api.zinc.com/orders \ |
| 97 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 98 | -H "Content-Type: application/json" \ |
medium line 161
Curl to non-GitHub URL
SourceSKILL.md
| 159 | |
| 160 | ```bash |
| 161 | curl https://api.zinc.com/orders/<order_id> \ |
| 162 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 163 | ``` |
medium line 187
Curl to non-GitHub URL
SourceSKILL.md
| 185 | |
| 186 | ```bash |
| 187 | curl -X POST https://api.zinc.com/returns \ |
| 188 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 189 | -H "Content-Type: application/json" \ |
Scanned on Aug 17, 2026
View Security Dashboard