wayfair-checkout
Buy products from Wayfair (wayfair.com) and manage those orders via the Zinc API (zinc.com). Use when the user wants to purchase, order, or check out an item from Wayfair, check Wayfair order status or tracking, cancel a Wayfair order, or return a Wayfair item. One API also covers Amazon, Walmart...
Install this skill
or
80/100
Security score
The wayfair-checkout skill was audited on Aug 17, 2026 and we found 4 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 53
Curl to non-GitHub URL
SourceSKILL.md
| 51 | |
| 52 | ```bash |
| 53 | curl "https://api.zinc.com/search?q=cast+iron+skillet" \ |
| 54 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 55 | ``` |
medium line 94
Curl to non-GitHub URL
SourceSKILL.md
| 92 | |
| 93 | ```bash |
| 94 | curl -X POST https://api.zinc.com/orders \ |
| 95 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 96 | -H "Content-Type: application/json" \ |
medium line 159
Curl to non-GitHub URL
SourceSKILL.md
| 157 | |
| 158 | ```bash |
| 159 | curl https://api.zinc.com/orders/<order_id> \ |
| 160 | -H "Authorization: Bearer $ZINC_API_KEY" |
| 161 | ``` |
medium line 185
Curl to non-GitHub URL
SourceSKILL.md
| 183 | |
| 184 | ```bash |
| 185 | curl -X POST https://api.zinc.com/returns \ |
| 186 | -H "Authorization: Bearer $ZINC_API_KEY" \ |
| 187 | -H "Content-Type: application/json" \ |
Scanned on Aug 17, 2026
View Security Dashboard