Back to plugin

Security audit

Agent Commerce Protocol

Security checks for vulnerabilities and agentic risk

Overview

This commerce plugin is purpose-aligned but auto-enables payment and public catalog tools that send store, product, and order-verification data to publisher-controlled services.

Review before installing. Use it only if you are comfortable with the default hou-tea.com registry and payment gateway receiving store, catalog, purchase, and transaction-verification data. Confirm wallet addresses and USDC amounts outside the plugin before paying, and treat remotely published store or product records as potentially public and not clearly removable through this plugin.

Static analysis

No suspicious patterns detected.