TiendaNube Commerce Bridge
Facilitates integration with Tienda Nube for e-commerce, enabling OAuth, product catalog synchronization, and order management.
Install this skill
Security score
The TiendaNube Commerce Bridge skill was audited on May 31, 2026 and we found 28 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 50 | const redirectUri = `${window.location.origin}/auth/callback`; |
Template literal with variable interpolation in command context
| 98 | redirect_uri: `${window.location.origin}/auth/callback` |
Template literal with variable interpolation in command context
| 305 | ```python |
Webhook reference - potential data exfiltration
| 494 | ## 8. Webhooks (Opcional) |
Webhook reference - potential data exfiltration
| 496 | ### Configurar Webhook |
Webhook reference - potential data exfiltration
| 498 | async def setup_tiendanube_webhook( |
Webhook reference - potential data exfiltration
| 503 | Registra webhook para recibir eventos de TiendaNube |
Webhook reference - potential data exfiltration
| 517 | # URL del webhook |
Webhook reference - potential data exfiltration
| 518 | webhook_url = f"{BASE_URL}/webhooks/tiendanube/{tenant_id}" |
Webhook reference - potential data exfiltration
| 520 | # Crear webhook |
Webhook reference - potential data exfiltration
| 522 | f"https://api.tiendanube.com/v1/{user_id}/webhooks", |
Webhook reference - potential data exfiltration
| 525 | "url": webhook_url, |
Webhook reference - potential data exfiltration
| 533 | ### Recibir Webhook |
Webhook reference - potential data exfiltration
| 535 | @router.post("/webhooks/tiendanube/{tenant_id}") |
Webhook reference - potential data exfiltration
| 536 | async def handle_tiendanube_webhook( |
Access to .env file
| 49 | const clientId = import.meta.env.VITE_TIENDANUBE_CLIENT_ID; |
Access to .env file
| 679 | - [ ] TIENDANUBE_CLIENT_ID en .env |
Access to .env file
| 680 | - [ ] TIENDANUBE_CLIENT_SECRET en .env |
External URL reference
| 37 | Redirect URI: https://yourdomain.com/auth/callback |
External URL reference
| 52 | const authUrl = new URL('https://www.tiendanube.com/apps/authorize/token'); |
External URL reference
| 147 | "https://www.tiendanube.com/apps/authorize/token", |
External URL reference
| 229 | f"https://api.tiendanube.com/v1/{user_id}/products", |
External URL reference
| 343 | f"https://api.tiendanube.com/v1/{user_id}/products", |
External URL reference
| 402 | f"https://api.tiendanube.com/v1/{user_id}/orders", |
External URL reference
| 471 | f"https://api.tiendanube.com/v1/{user_id}/products", |
External URL reference
| 522 | f"https://api.tiendanube.com/v1/{user_id}/webhooks", |
External URL reference
| 580 | f"https://api.tiendanube.com/v1/{user_id}/store", |
External URL reference
| 686 | **Tip**: Para debugging, usar TiendaNube API Explorer: https://tiendanube.github.io/api-documentation/ |